OT security and software supply chain.

Technologies

• Industrial security programmes Security management system for asset owners of control and monitoring systems.
• System and component security levels Security requirements for systems and components at target security levels.
• Secure development lifecycle Secure product development practice for anything shipped to sites.
• OT security guidance and threat models Guidance and adversary techniques specific to operational technology.
• Software bills of materials Machine-readable component inventories for every image and firmware build.
• Build provenance and supply-chain levels Signed attestations of how and where artefacts were built, graded by level.
• Vulnerability exploitability exchange Machine-readable advisories stating whether a known vulnerability affects a product.
• Hardware supply chain integrity Practices against counterfeit and tainted components.
• Product cybersecurity regulation Essential requirements and vulnerability reporting duties for products with digital elements.