Cybersecurity for Products and Production

Beschreibung

The European Cyber Resilience Act requires manufacturers to manage cybersecurity risks across the entire lifecycle of digital products. This book presents a practical, structured process for doing so — spanning individual products, networked systems, and OT environments. Grounded in IEC 62443-3-2 and extended into a repeatable risk analysis methodology, the approach is illustrated through case studies from product, system, and OT perspectives. The methodology supports preparation for the Cyber Resilience Act in alignment with EU harmonized standards under the CRA and EN 40000-1-2. This book is aimed at cybersecurity engineers, developers, and architects.   The Content Introduction - Regulation - Standards for Manufacturers of Connected Products and Industrial Systems - Integrated Management Systems and Integrated Risk Management - Fundamentals of Risk Analysis - Defining the Scope of a Risk Analysis - Asset Identification - Modeling and Rating of Threat Scenarios - Conducting the Risk Assessment - Deciding on Risk Treatment - Future Trends   The Authors Alexander Schlensog is a physicist with over 25 years of experience in IT and cybersecurity, combined with extensive leadership responsibility. His work focuses on cybersecurity in industrial environments and critical infrastructures, as well as the implementation of European digital regulation.
Rodrigo do Carmo holds a doctorate in computer science with a background in telecommunications. He advises industry on risk management as well as product and OT security, and previously worked in the automotive sector.
Makan Rafiee is a mathematician and computer scientist, and heads the Crypto & Cloud Solutions department at secunet Security Networks AG, with a focus on cryptography, post-quantum cryptography, and PKI.
Nils O. Abeling holds a doctorate in physics and advises at secunet Security Networks AG on securing networked systems in industrial environments, with a particular emphasis on PKI and risk analysis.
The increasing number of cybersecurity regulations for the manufacturing industry requires a structured risk management method: This book aims to provide a comprehensive, practical guide to risk management for networked industrial plants. It covers the entire value chain – from individual machines (such as CNC milling machines or robots) to their digital ecosystem, including the cloud/on-prem backend of manufacturers, integrators, and service providers, to the factory production environment. On this basis, the work combines technical best practice approaches with the relevant ISO/IEC 27000 and IEC 62443 standards and explains how their specifications can be pragmatically transferred into everyday operations. Using detailed, realistic case studies, it shows how technical rigor and operational efficiency can be combined to minimize security and liability risks throughout the entire life cycle. Special attention is paid to the very new European requirements, in particular the Cyber Resilience Act: The book provides practical information that companies can use to prepare their products and processes for compliance now. It offers an understandable approach and a precise reference for seamlessly combining legal, organizational, and technical requirements for cybersecurity, safety, and product liability. This also gives readers the opportunity to prepare for compliance, particularly with the Cyber Resilience Act for risk management, even before harmonized standards are published at the European level.
Helps to understand and implement the latest legal standards such as the European Cyber Resilience Act Shows a way to implement risk management in accordance with IEC 62443 (becomes relevant for product manufacturers) Lays the foundation for consolidated risk management (linking product risks and production risks)

Autor*in

Alexander Schlensog

Themen in »Cybersecurity for Products and Production«

Product safety Production reliability Safety of products with digital elements Cybersecurity for Safety Industry 4.0 Risk assessment Risk management Threat analysis and risk assessment IEC 62443 Manufacturing industry Cyber Resilience Act Cyber security

Stimmen zu »Cybersecurity for Products and Production«

Details

Link teilen