Uploaded by ciscoboy871

TIA-SCS-9001-Release-2.0-

advertisement
SCS 9001 Release 2.0
A Global Cybersecurity
and Supply Chain Security
Standard for Today’s
Evolving Threat Landscape
Enhanced and Expanded Standard from TIA Ensures Trust in Digital Technology Across All Applications and Sectors
¦ª©§¨¤£¢©¥¨ª
3012311&#/'&('#/$2 /%$("42 $$#&'('#/$23 !2
1(1/$'12/%2%'1"$121,1"$0'2"1"1$1/($2#"12(0/2
..2#,2&#/'1$2 (2'/#1$2)..214241"$2/%2
(0#0(21%1"$2"1"1$1/('/22$1&($2#2(012
#"%'%12'/#"('#/2/%2&#/'&('#/$2(1&0/##42
3!2$42&0'/2 $221%'/2$(/%"%$2#"/'('#/)2
3 20$2#/2"1'1%2#/2(01211"('$12#2'($21(1/$'12/%2
%'1"$121,1"$0'2(#2%11#2(0#$/%$2#2(1&0/'&2
$(/%"%$2#"2(012 32'/%$("42 %%'('#/4)2(0"#02'($2
+32-#"2,$'/1$$21"#"/&12'"#11/(2
&#/'(4)23 20$2,'(2(012 "$(11"2#,2
4,1"$1&"'(42/%2+42 0'/2+1&"'(42+(/%"%20'&02
$2"11$1%2'/21"42.2 $2/2'/%$("42$(/%"%$
%11#1/(2#"/'('#/)23 2&#/('/42#/'(#"$2/%2
'"#1$2"#"$2/%2$(/%"%$2(#2"12(012(1$(2
"1(2("1/%$)2(1&0/##'1$)2/%2#,21&#/#4
3012&4,1"$1&"'(42/%$&120$21#1%2$'/' &/(42
$'/&12(012+ +2..2+42 0'/2+1&"'(42*/11/(2
+4$(12$2&#/&1'1%2/%2%11#1%2*#"12"11/(2
/%2$#0'$('&(1%2((&$2"12("1('/2$42&0'/$)2
&#/$1"$)2,$'/1$$1$)2/%2#1"/1/(21/('('1$2%12(#2
$11"2#,2&(#"$)2'/&%'/
‹ o~‚¡‚Ÿž™žƒŸ—Ž•‘~™—Œ—$22&#/$11/&12#2(012
T$$'r"'/12&#/q'&()2"'12'/(1"/('#/2"1('#/$)2
&4,1"&"'12#"/'('#/21/$'#/2/%2(012"#(02#2
/('#/'$2/%2/('#,'('#/2#11/(€
‹ oŸ‚iŸ—~ƒ‚•‚hžƒ—Ž•ƒ~‘™ž•™ —Œ—(("',(1%2(#2$"'/2
'/q('#/2/%2%1,(211$)2"'$'/2'/(1"1$(2"(1$)2/%2(012
11"#"$1/'/2'&(2#2&'(12&0/š
‹ f¡•e~e—™™ƒx—Ž‘gƒ~—Œ2&''((1%2,42'/&"1$1%2
%''('('#/2/%2'/(1"&#//1&(''(4)21/%1%2%(2
&&1$$)2/%2(012"#(02#2 #32/%2&#%2$1"'&1€
‹ dƒx—‚g—‘~‚Ž‘ƒ~—Œ2(#2'11/(2%1(12
&4,1"$1&"'(421$"1$2%12(#2$'1%2,#"2
$0#"(1$)2$2'/2$(/%"%$2/%2"1('#/$)2/%2
,%1(2&#/$("'/($c1$1&'42#/2$2/%2
1%'$'1%21/(1""'$1€
‹ ”b~—~¡Ÿ‚ž™™ž‚•—‚g—™~ƒb•‚Ÿ‚až~—`i —‚¡bž™žƒ™~e—
•‚•_™™~—•e—a‚^~‘•h~•™—e^~‘‘ž~j—Œ2$&02$2
#1/$#"&12$#("1)2 #3)2&#%2&#('/)2"(' &'2
'/(1'1/&12 !)2&0'/121"/'/)2/%2
&"4(#&""1/&4
0/1$2'/2(012&4,1"$1&"'(42/%$&1)2&#,'/1%2'(02
11%,&2'2'#(2"#"$)2'/%$("421%1"$)2/%2
#1"/'/2,#%'1$)2012&1%2#"23 21,1"$2(#2
%(12/%21/%2(012$&#12#2'($2+ +2..2
4,1"$1&"'(42/%2+42 0'/2+1&"'(42$(/%"%23012
&#'/2+ +2..2T11$12.2'2"#'%122#"12
&#"101/$'12#,2&4,1"$1&"'(42/%2$42&0'/2
$1&"'(42$(/%"%2%(,12(#22%''(2(1&0/##'1$2
&"#$$22'&('#/$2/%2'/%$("42$1&(#"$2(#2$1"12
(#%4$2"1(2/%21(1/%2"#(1&('#/201"12/11%1%2
0'121/$"'/2'/1/(2'(021#'/2#1"/1/(2
1'$('#/2/%2'/%$("42'/'('('1$
@=>7<?<;:74;94863215;104
R;FN4G7?N1OKO0=42154
DKO>2K4L1<79F
m!) "/* )" )/ / ! */ !)!*/!/))
!))//!^// ) ,!)!) &_ /.)!! !))"/ !/) !!/ ./ /*
.*/) /&_./ ///.)+"/ *//!) )*/ ) !. /.!*/!! /! /**) &
„371 9O{<?743<OK;v7<2F;O14
;1?<729794u{K17<2>;K;F=
))!!)*! /!* )*/ ) */ !)!/),
!"*/'!* !/)/**!! ) )
/! /))/*!/* )! ) ­'*!
!/)*!/ )/!*š$¬_ª·—!/
!")!) )"!)!!" /./ !•))
/*/ !^//!/))!"!") &
„8‘4‹„L‰@8
@„Œ8ˆ‡‹8‹
Î-($/)È!"*/È/"* )¬ _) ¬/!*È )!
)º
$/), !"*/ !'*///!/). /!/!*/
*"/)"+"!" )./ //&!*/.)
# !'!/ / ! !))!/), !"*/!/
).//*/) /!'!/), !"*/!/ */ )
/"!)/.)!! # )/*! /!)
"!!/*) !*!))! ) )
)"'"*) ///)( )(&-
$/), !"*/!/ !*/)"*/! !*/ /'!*) !)/!/ )!' )*/ ) ./
!/)'!*!!* */)!*")/*) /!/&
$/), !"*/!/ !!'/)!,*// "/
//!/* .*) /!'//* /).!"
/"* !/* .!* )*%!)&)(!*/.)
( !') %/!/), !"*/!/!))// !)/")/* .!*/.)( .) . .,* ")/*/ &-
@>?B?=?9876+9?#176:B9#6:?B04B.0@B*?=7+?1B#6*B9?,#)?*B
1?9=7+?1B#=#7,#",?B#+9011B+0((?9+7#,$B76*%1)97#,$B#6*B
+061%(?9B1?+)091B71B*97=76:B'7*?1&9?#*B#*0&)706$B
+9?#)76:B(09?B6?)'09<B?6)9!B&076)1B1%1+?&)7",?B)0B#))#+<3B
/?6*091B76B)>?B"%9:?0676:B#6*B+0(&?)7)7=?B.0@B(#9<?)B
9?,!B>?#=7,!B06B0&?6810%9+?B104)'#9?B)0B<??&B&97+?1B
*0'6B#6*B7(&90=?B1&??*B)0B(#9<?)3B.0@B*?=7+?1B#9?B#,10B
)!&7+#,,!B+%1)0(72?*B409B1&?+7 +B4%6+)7061B'7)>B,7(7)?*B
+0(&%)#)706#,B#"7,7)!$B04)?6B76>7"7)76:B#*?%#)?B1?+%97)!B
(?#1%9?13B061%(?9B.0@B*?=7+?1B?3:3$B'?#9#",?1$B1(#9)B
>0(?$B?6)?9)#76(?6)B*?=7+?1-B4#+?B#**7)706#,B971<1B*%?B)0B
#B,#+<B04B+061%(?9B1?+%97)!B#'#9?6?11$B761?+%9?B>0(?B
6?)'09<1$B'?#<B&#11'09*1$B#6*B0%)*#)?*B104)'#9?3A
7)>B)>?1?B'?#<6?11?1$B.0@B*?=7+?1B#9?B76+9?#176:,!B
+0617*?9?*B,0'8>#6:76:B49%7)B)0B"?B?#17,!B?&,07)?*B"!B
+!"?9+97(76#,13B;7:>8971<B=%,6?9#"7,7)7?1B76B.0@89?,#)?*B
+0*?B"#1?1B%(&?*B5B0=?9B)>?B&#1)B =?B!?#91$B#6*B
)>?B 91)B)'0B(06)>1B04B5B1#'B#BB76+9?#1?B76B
#))#+<1B)#9:?)76:B.0@B*?=7+?1B+0(&#9?*B)0B53B
@>?B*?&,0!(?6)B04B"90#*"#6*B#++?11B76B(09?B9?:7061B
#90%6*B)>?B:,0"?B'7,,B?&#6*B+066?+)7=7)!B#6*B4%9)>?9B
*97=?B)>?B.0@B(#9<?)$B?1&?+7#,,!B#(06:B+061%(?913A
.6B9?1&061?B)0B.0@B1?+%97)!B971<1$B)>?BViB.0@B!"?91?+%97)!B
.(&90=?(?6)BK+)B04B55B9?%79?*B)>?Bq#)706#,B.61)7)%)?B
04Bi)#6*#9*1B#6*B@?+>60,0:!Bq.i@-B)0B1?)B(767(%(B
1?+%97)!B1)#6*#9*1B409B.0@B*?=7+?1B0'6?*B#6*B+06)90,,?*B
"!B)>?B4?*?9#,B:0=?96(?6)3B.6B5$BViBL?+%)7=?BJ9*?9B
LJ-B5WB)>?6B*79?+)?*Bq.i@B)0B767)7#)?B&7,0)B&90:9#(1B
)0B?*%+#)?B)>?B&%",7+B06B)>?B1?+%97)!B+#&#"7,7)7?1B04B.0@B
*?=7+?1B#6*B7*?6)74!B.0@B+!"?91?+%97)!B+97)?97#B409B#B
+061%(?9B,#"?,76:B&90:9#(3Bq.i@.pBWH$Bo90 ,?B04B)>?B
.0@B09?BF#1?,76?B409B061%(?9B.0@Bo90*%+)1$B1?9=?1B#1B
)>?B40%6*#)706B409B)>?B=0,%6)#9!B,#"?,76:B&90:9#(3B.6BE%,!B
5$B)>?BF7*?68;#9971B#*(7671)9#)706B#660%6+?*B)>?BViB
!"?9B@9%1)Bh#9<B&90:9#(B'>7+>B'7,,B1%&&09)B
+!"?91?+%97)!B9?%79?(?6)1B%6*?9Bq.i@.pBWHB#6*B71B
?&?+)?*B)0B"?B%&B#6*B9%6676:B76B53B@>?BC?*?9#,B
0((%67+#)7061B0((711706$B'>7+>B'7,,B#*(7671)?9B)>?
›B›@>?B@7&&76:Bo076)BL&,0976:B)>?Bi%9:?B76B.0@B!"?9#))#+<1B|,0"#,,!$B>?+<Bo076)Bp?1?#9+>$B5z
10
a(R(+-'' S'','*'- !$-.-^#R'! -'!+,'
! , .--! ! " ' $'!-'$!-& *S!"' * <,$- "$$$! "-'-'! , - - '!-
" " -'-!"- . -- - +$!.-
'- -"+-'-"'! '" !"-'"$
"+-'-"'! "'! -'!*! "$! ,' .-$! "-
" ! ,(.--"$'!-'.-$--$-
-!"-*-
'".! -" '-'-' . '!- .-+!'-"'-
-' ! -
-!"-*-'+$-* '-(R--'$ " '-' '- !$-'.-
--$-
& .'! ! S ,--
"- .-!'"! -
.-','*! "$! ,
& *@- @*<,$-*;<*;,! -".* R ,d
R!!$'!
-' ! $-' '- -'*! .'- . ?E"
'!-- " ! ,"+-'"'!-$-,!$ ! --'$ .-'' ! , -$-,!$ ! (5.-a6-
'" !"-' -'#R-"'! .-'" R-"'! -$-" !" ! # ' '" '- R#%
! .! .-!'- !' -
(.-2--'$3!
',' 2-3&S%
-$!"! $"-' .-'"-! , ',- ! .-"$+--'$,- "!- .-!'"
'" '(^#R
$.$ !$-"+-'-"'! +$!" ! ' .-"$*
! "$! ,^#RÈ))/?*<!-$! - R-"'! '!"! +$!"$ ! , ^#RÈ))/?)*
<- -'$&""-
'$<! "-'$R -(X
&" '-\!'-$$ " '-'*!' -'* '- !$-' - '-#-!"--- '-\!'--"'! '
+-'-,! , '- (&'-D'- a ! Da%+-'3-!$!- "-&" 3&%$' -" " -'
+! --'".! ,'! ,'" ' '-
! .!,! $" -
*! "$! ,$$#-!"-(X
R! ,'-$ ".-! +-'-"'! ;+-$$! ,
R".--'# .".!-- $'-", ! ! ! .
2! $ <-' (
Ijqhikwinxqu;wypyignksnon
tylfpq5qtiqtnsryht
-' .- -"-*!
-' $', ! ! $ - '
"+-'-"'! .!'-! "-- "' ! *
.-
!" ! * - . "-'- -(^*
--',! , -". $,!-$!-' !"!$!
".! -$-' ! , S;%" .-$!-
-$$!,- "- &#% ! $!- +- -'- -" $!"!" !! '-/'-$ -
- --(S!"' +-'R!, $','
vpyltnuyjmlxkwinksnon
$--',-&# $- '!$$! -"'! !, $*)
ihyrkwinugfqhuhkjqn
! / -,'* ?)."-','*""-$$
ymmyhxlwkxg
+$"! ,-'ƒ(+!$$! .!.! , " (E
! .!,! ! ! .-,' .#$"-'-
"$/+-$ ! . ! "'-! ,$$--',-- /
'"-"-'$!" ! ','! ,!
&#% - +$-!
-'"-
-,' ! "'!-'-'$(
- /'"- '-$ -'+!$! !-*!" ,' ! *
',-$',- - * $"""-'- '!" ! +!$$! !-
! .- - (za ' -$*
"+-'"'!! $'-$ $--',! ,&#(S;
-". $,!- " '$ -'+!$! !-* -
$'-*"'"'* $- $- * '$ -"
-
-! "!$- ,! --'! , "(/
.-'!-! "' "''- " . -+$"".! '-,!! ,'!- '-"$/+--"'! .'- (
-". $, - +$- .--"'- ' -'!,! $$-
+-'"'!! $'-$+-"! ,! "'-! ,$"$/
! .- "!$! '!$,!! ,"+-'"'!! $ -
* ',- ! ,+$!"/"! ,$!" ! -+
- ! ,' "!$! ! ,+"'! ! /
-'-' ,! ""- /! -"$$ '*-'
+-' '--'!"-'"+-'"'!! $ ""
$ ".' '- "(X
* (&""'! , '-"-
'-' *"$
-$! ! "-,'-+ * -'$)
+! ----'!- "- +'-".! .-!'"$
- !' -
! )( X5XXa^ -'- "- '- ª--$X XX)ƒ<$+$.'- 3-' *'R '!Ÿ
XXX)ƒ.$-$R-"'! R *.$-}
XzXX+-'R!, $3-' *S!"'
a^&ª%*+-'"'!-;-,!$ ! '$!-*)‡
YX
lgijhgefca_`be]`e
[i\difc^]ckebZ_edaijg_\
(.#)!.'#%!)!#)%#.#!).")))).'
'!"#"!...'""!#.#.#!).%
%!)#,)!))%)!." !
.))#)!). !& ,).!
#. #.)'"!.!)..")!". %!)#)."
",!+.'!..".. '"".
+!!.) !'""!#.%")!%
"'!%).'. .!"!+!"..!)!)!
(.)# - ! !*!)!"!!$."
%!)!#)%)!'%#"")! )!'.""!
.).!)+.#! )!'".)+!
)'"+.!'""#%!)!!.!!) '+!).!.'!.#!)!#"%) ,).!!.%
.)!#'.#%!)#,."!))!.!
.)!#+!)%!%.!).."!)".#"! !
&.)!),.' ) ! &!"#
)!&.)!),.' ).!+!)" !)
.#%!)#)!,)#!.),.'')
}_[fa]ckebZ_elgijhge
}fddg~e€Zh]ce]`eyia_e
Š]bhgebZhceŒ‰_a
W)!.'+".!)"! !..)!
. ))!!+!"!.)!+" .!+!): !
)!. ))!#.!..#.!.
!8!.!+#!..!),#!)""!
"!).)!)#! #)!#"! '""
"%# .W#,.)!"%# .)!
.#)!.')#""% .!! !)!
"% .)!) .'.+!)'!4--3.
!.)#!"%# .#,!!!.-0T.
-H !!#,)'!.'8
#.!..!+!"!.)#!!#)""!
"..),!!#)"%# .#,
8#,"%!#"!#) ..!),.
#"".!)
H.%!šT .."! !)!"% .&!)#!)-
&6+-4.-+#.#,+++03.6-*44')$,%-+$*6%#)#,+
7!5 +$*#%+60+61!720%6+$#+0(& #.
%--*+*%0$+%0+#%3)%46$#%$+-#,#+,$+#,+
-.3#6+-*44')$,%-+$*6%#)8& +4#+ +67#,+
$+.3 + +#0*0+# 1%--*+0
+ .60* !26+*%6%3+0+6'+$%+-#.
$. 4')%#,#,+(& *%0$+8&00%#%.#,+5 ) +6-+$*6%#)0&36-#6*$#*6+ +$*6%#)+$)& 1
%46#+6-,%4%#,#%.'-+$*6%#)0
$.*#+6%#+''%+$++$%+-6+'+-+0#,+0*6%
+$*6%#)"6 +.6 #,#46.%0+-*%0+'%+-3.6-.3#6+
+0.6-.% 4'+ +#%-+$*6+0++'.4 +#
46.$+--+-8-6+-*'#.3#,+-++/.6#- )3+0+6'
.+6 +#-# +,.'0+6-046#+6- *-###+-##,#
#,+),+$$+4# '+$) +6-+$*6%#)0-*44')$,%
6%- + +# 14'%4'$+%$'*0%''
'%% '+#%#%+-0-* 6#++-.3#,+6.0 0
*%#)$$+--0+4'.) +#16.6 87
'-.-#,+%#6.0*$#%..3#,+ +$*6%4+ .*6$+
.3#6+$#46.4.-+0 %46#%-'+%-'#%.#,#
%$6+-+-& -3.$*-..4+ -.*6$+$.0+6%- -8&#
6+*%6+--.3#6+-*44'%+6-#.#,+3+0+6'.+6 +##.
##+-##.#,+-+$*6%#).3#,+%6$.0+046.0*$+-.3#6+
%''-.3 #+6%' -1#.#6$ -*44')$,%#,6+#-8
bfbedccaeytexenupzoqwqljh
vloqtmypekwqgxwebmxorxir{
,+.+6 +#-%$6+-+03.$*-.$) +6-+$*6%#)0
-*44')$,%-+$*6%#)%'',+'4 ..-#0+3+-+-%#,+
4* '%$-+$#.68X.++60+$%4,+6%0$. 4')%%#,
+'+%-'#%..3#+%00%#%.#.%0*-#6) -4+$%?$
-#060-0*%0+'%+-$ +.+6,+' %8'*-
#,+3$#6+ %-#,##,+46%#+-+$#.6$$.*#-3.6
-* -##%'4.6#%..3#,+.6'0-+*%4 +#0+%$+-
0+#.6 -0-4- *'#%4'+%0*-#6%+-06+%.-8
,+'. '$.-* +6 6 +#'.+$$.*#+03.6
6.*,')^7<.3''$.+$#+0&.0+%$+-%770%-
46.9+$#+0#.6+ %##,#'++'#,6.*,7>78\
\ ##%-#(*
).3#,+$) +6-+$*6%#)%%#%#%+-*0+6)'-.3.$*-
.$. .*'+6 %'%#%+--*$,-$.-* +66++--
0+%$+%0+#%?$#%.-+$*6+$$+--46.#+$#%..3
4+6-.'0#0*#. #%$-.3#6+*40#+-00.
.#+##.#,+3.*0#%..3-.3#6+0,606+
0++'.4 +#0++4%#,%#,+'. '-*44')$,%8½
%$+7&- €77!) +6-+$*6%#)0 *44')
,% +$*6%#) #060,-46.%0+0'. '* 6+''
3.6 -+'%+$) +6-+$*6%#)6+*%6+ +#-#,#44')#.''
-4+$#-.3#,+-#$. 4'+-*44')$,%$6.--''
4* '%$046%#+-+$#.6-8ƒ,%'+.-%'+-#060%-
-*$%+#3.6-+$*6%''$. 4.+#-044'%$#%.-
€77!46.%0+--#6%,#3.660 +-3.6+#.6 .4+6#.6--+6%$+46.%0+6--)-#+ %#+6#.6-
*3$#*6+6- *)+6--*44'%+6-0$.-* +6-$6.--
#,+'. '-*44')$,%#.+-*6+#,##,+-.3#6+
,606+0.#,+6#+$,.'.)$. 4.+#-#,+)
46.0*$+4*6$,-+00+4'.) ++#$6%#%$'-+$*6%#)
+$, 6 -#. %#%#+#,+6%- .3$) +6-+$*6%#)##$ -8½
€77!-*0+6')%46.$+-- -+06$,%#+$#*6+%-
-)-#+ #%$6+4+# '+36 +.6 #,#%#+6#+-
-+$*6%#)6+*%6+ +#-'.-%0+3*$#%.'6+*%6+ +#-
%#,+0+-%0++'.4 +#00+'%+6).3+*%4 +#
00+%$+-8,%-%$'*0+-$. 46+,+-%+46.+$+
6%- --+-- +#0-.3#6+*-+46.$+--+-3.646+
-$6++%#6$ %')¿%''$. 4.+#-0
-* $. 4.+#-%$'*0%36++0.4+ -.*6$+
-.3#6+$.0+$.#+#0+-*6%$. 4'%$+ .
''-*44'%+6-8 €77!'-.%$'*0+-46.$+--+-3.6
%0+#%3)%006+--%06+4.6#%-+$*6%#)6%- -#.
%% %¿+#,+4.#+#%'3.6##$ 00+6-+% 4$#.
$.-* +6-0 *-%+--+-8
+6.3&..+$#+0+%$+-ƒ.6'0%0+7!€ 7!%#,".6+$-#-#.7>7
Ž
vv€zz|€~xyx{wx€}uz€
~xwŠ‰†„w€‡‰€‡‚x€ xx„
! ! ! ! ! !
!
!!! ! ! ! ! !! !! 8 . ! 5 ( !
! $ !! ! ! ! !#
! ! 5 ( !"
² ½Á¿¨§¹§˜­®µ¹”¿º¹˜³ ! ! ! ! J ! ™
² ½Á¿¨§¹§˜­®µ¹”¿º¹˜˜³˜ ! ! ! ! !¯
² ’¶Á”®µ¹§˜¾ÁÁ®”“˜³ ! #¯
² «Á§¿“¹§˜¶¿ÁÁ¼¨º˜­®¨“”®¾˜³ ! –
b 5 ( 5 (! W# #! # 8 ! !
5 ( ! ! !
# ! ! !$! ! ! # ! ! ! ! ! ! ! ! !! ! J
!$ ! ! ! ! !
!_
)
Download