SCS 9001 Release 2.0 A Global Cybersecurity and Supply Chain Security Standard for Today’s Evolving Threat Landscape Enhanced and Expanded Standard from TIA Ensures Trust in Digital Technology Across All Applications and Sectors ¦ª©§¨¤£¢©¥¨ª 3012311&#/'&('#/$2 /%$("42 $$#&'('#/$23 !2 1(1/$'12/%2%'1"$121,1"$0'2"1"1$1/($2#"12(0/2 ..2#,2&#/'1$2 (2'/#1$2)..214241"$2/%2 (0#0(21%1"$2"1"1$1/('/22$1&($2#2(012 #"%'%12'/#"('#/2/%2&#/'&('#/$2(1&0/##42 3!2$42&0'/2 $221%'/2$(/%"%$2#"/'('#/)2 3 20$2#/2"1'1%2#/2(01211"('$12#2'($21(1/$'12/%2 %'1"$121,1"$0'2(#2%11#2(0#$/%$2#2(1&0/'&2 $(/%"%$2#"2(012 32'/%$("42 %%'('#/4)2(0"#02'($2 +32-#"2,$'/1$$21"#"/&12'"#11/(2 &#/'(4)23 20$2,'(2(012 "$(11"2#,2 4,1"$1&"'(42/%2+42 0'/2+1&"'(42+(/%"%20'&02 $2"11$1%2'/21"42.2 $2/2'/%$("42$(/%"%$ %11#1/(2#"/'('#/)23 2&#/('/42#/'(#"$2/%2 '"#1$2"#"$2/%2$(/%"%$2(#2"12(012(1$(2 "1(2("1/%$)2(1&0/##'1$)2/%2#,21&#/#4 3012&4,1"$1&"'(42/%$&120$21#1%2$'/' &/(42 $'/&12(012+ +2..2+42 0'/2+1&"'(42*/11/(2 +4$(12$2&#/&1'1%2/%2%11#1%2*#"12"11/(2 /%2$#0'$('&(1%2((&$2"12("1('/2$42&0'/$)2 &#/$1"$)2,$'/1$$1$)2/%2#1"/1/(21/('('1$2%12(#2 $11"2#,2&(#"$)2'/&%'/ o~¡~$22&#/$11/&12#2(012 T$$'r"'/12&#/q'&()2"'12'/(1"/('#/2"1('#/$)2 &4,1"&"'12#"/'('#/21/$'#/2/%2(012"#(02#2 /('#/'$2/%2/('#,'('#/2#11/( oi~h~ (("',(1%2(#2$"'/2 '/q('#/2/%2%1,(211$)2"'$'/2'/(1"1$(2"(1$)2/%2(012 11"#"$1/'/2'&(2#2&'(12&0/ f¡e~exg~2&''((1%2,42'/&"1$1%2 %''('('#/2/%2'/(1"&#//1&(''(4)21/%1%2%(2 &&1$$)2/%2(012"#(02#2 #32/%2&#%2$1"'&1 dxg~~2(#2'11/(2%1(12 &4,1"$1&"'(421$"1$2%12(#2$'1%2,#"2 $0#"(1$)2$2'/2$(/%"%$2/%2"1('#/$)2/%2 ,%1(2&#/$("'/($c1$1&'42#/2$2/%2 1%'$'1%21/(1""'$1 b~~¡g~ba~`i ¡b~e _~ea^~h~e^~~j2$&02$2 #1/$#"&12$#("1)2 #3)2&#%2&#('/)2"(' &'2 '/(1'1/&12 !)2&0'/121"/'/)2/%2 &"4(#&""1/&4 0/1$2'/2(012&4,1"$1&"'(42/%$&1)2&#,'/1%2'(02 11%,&2'2'#(2"#"$)2'/%$("421%1"$)2/%2 #1"/'/2,#%'1$)2012&1%2#"23 21,1"$2(#2 %(12/%21/%2(012$&#12#2'($2+ +2..2 4,1"$1&"'(42/%2+42 0'/2+1&"'(42$(/%"%23012 &#'/2+ +2..2T11$12.2'2"#'%122#"12 &#"101/$'12#,2&4,1"$1&"'(42/%2$42&0'/2 $1&"'(42$(/%"%2%(,12(#22%''(2(1&0/##'1$2 &"#$$22'&('#/$2/%2'/%$("42$1&(#"$2(#2$1"12 (#%4$2"1(2/%21(1/%2"#(1&('#/201"12/11%1%2 0'121/$"'/2'/1/(2'(021#'/2#1"/1/(2 1'$('#/2/%2'/%$("42'/'('('1$ @=>7<?<;:74;94863215;104 R;FN4G7?N1OKO0=42154 DKO>2K4L1<79F m!) "/* )" )/ / ! */ !)!*/!/)) !))//!^// ) ,!)!) &_ /.)!! !))"/ !/) !!/ ./ /* .*/) /&_./ ///.)+"/ *//!) )*/ ) !. /.!*/!! /! /**) & 371 9O{<?743<OK;v7<2F;O14 ;1?<729794u{K17<2>;K;F= ))!!)*! /!* )*/ ) */ !)!/), !"*/'!* !/)/**!! ) ) /! /))/*!/* )! ) ­'*! !/)*!/ )/!*$¬_ª·!/ !")!) )"!)!!" /./ !)) /*/ !^//!/))!"!") & 84L@8 @88 Î-($/)È!"*/È/"* )¬ _) ¬/!*È )! )º $/), !"*/ !'*///!/). /!/!*/ *"/)"+"!" )./ //&!*/.) # !'!/ / ! !))!/), !"*/!/ ).//*/) /!'!/), !"*/!/ */ ) /"!)/.)!! # )/*! /!) "!!/*) !*!))! ) ) )"'"*) ///)( )(&- $/), !"*/!/ !*/)"*/! !*/ /'!*) !)/!/ )!' )*/ ) ./ !/)'!*!!* */)!*")/*) /!/& $/), !"*/!/ !!'/)!,*// "/ //!/* .*) /!'//* /).!" /"* !/* .!* )*%!)&)(!*/.) ( !') %/!/), !"*/!/!))// !)/")/* .!*/.)( .) . .,* ")/*/ &- @>?B?=?9876+9?#176:B9#6:?B04B.0@B*?=7+?1B#6*B9?,#)?*B 1?9=7+?1B#=#7,#",?B#+9011B+0((?9+7#,$B76*%1)97#,$B#6*B +061%(?9B1?+)091B71B*97=76:B'7*?1&9?#*B#*0&)706$B +9?#)76:B(09?B6?)'09<B?6)9!B&076)1B1%1+?&)7",?B)0B#))#+<3B /?6*091B76B)>?B"%9:?0676:B#6*B+0(&?)7)7=?B.0@B(#9<?)B 9?,!B>?#=7,!B06B0&?6810%9+?B104)'#9?B)0B<??&B&97+?1B *0'6B#6*B7(&90=?B1&??*B)0B(#9<?)3B.0@B*?=7+?1B#9?B#,10B )!&7+#,,!B+%1)0(72?*B409B1&?+7 +B4%6+)7061B'7)>B,7(7)?*B +0(&%)#)706#,B#"7,7)!$B04)?6B76>7"7)76:B#*?%#)?B1?+%97)!B (?#1%9?13B061%(?9B.0@B*?=7+?1B?3:3$B'?#9#",?1$B1(#9)B >0(?$B?6)?9)#76(?6)B*?=7+?1-B4#+?B#**7)706#,B971<1B*%?B)0B #B,#+<B04B+061%(?9B1?+%97)!B#'#9?6?11$B761?+%9?B>0(?B 6?)'09<1$B'?#<B&#11'09*1$B#6*B0%)*#)?*B104)'#9?3A 7)>B)>?1?B'?#<6?11?1$B.0@B*?=7+?1B#9?B76+9?#176:,!B +0617*?9?*B,0'8>#6:76:B49%7)B)0B"?B?#17,!B?&,07)?*B"!B +!"?9+97(76#,13B;7:>8971<B=%,6?9#"7,7)7?1B76B.0@89?,#)?*B +0*?B"#1?1B%(&?*B5B0=?9B)>?B&#1)B =?B!?#91$B#6*B )>?B 91)B)'0B(06)>1B04B5B1#'B#BB76+9?#1?B76B #))#+<1B)#9:?)76:B.0@B*?=7+?1B+0(&#9?*B)0B53B @>?B*?&,0!(?6)B04B"90#*"#6*B#++?11B76B(09?B9?:7061B #90%6*B)>?B:,0"?B'7,,B?&#6*B+066?+)7=7)!B#6*B4%9)>?9B *97=?B)>?B.0@B(#9<?)$B?1&?+7#,,!B#(06:B+061%(?913A .6B9?1&061?B)0B.0@B1?+%97)!B971<1$B)>?BViB.0@B!"?91?+%97)!B .(&90=?(?6)BK+)B04B55B9?%79?*B)>?Bq#)706#,B.61)7)%)?B 04Bi)#6*#9*1B#6*B@?+>60,0:!Bq.i@-B)0B1?)B(767(%(B 1?+%97)!B1)#6*#9*1B409B.0@B*?=7+?1B0'6?*B#6*B+06)90,,?*B "!B)>?B4?*?9#,B:0=?96(?6)3B.6B5$BViBL?+%)7=?BJ9*?9B LJ-B5WB)>?6B*79?+)?*Bq.i@B)0B767)7#)?B&7,0)B&90:9#(1B )0B?*%+#)?B)>?B&%",7+B06B)>?B1?+%97)!B+#&#"7,7)7?1B04B.0@B *?=7+?1B#6*B7*?6)74!B.0@B+!"?91?+%97)!B+97)?97#B409B#B +061%(?9B,#"?,76:B&90:9#(3Bq.i@.pBWH$Bo90 ,?B04B)>?B .0@B09?BF#1?,76?B409B061%(?9B.0@Bo90*%+)1$B1?9=?1B#1B )>?B40%6*#)706B409B)>?B=0,%6)#9!B,#"?,76:B&90:9#(3B.6BE%,!B 5$B)>?BF7*?68;#9971B#*(7671)9#)706B#660%6+?*B)>?BViB !"?9B@9%1)Bh#9<B&90:9#(B'>7+>B'7,,B1%&&09)B +!"?91?+%97)!B9?%79?(?6)1B%6*?9Bq.i@.pBWHB#6*B71B ?&?+)?*B)0B"?B%&B#6*B9%6676:B76B53B@>?BC?*?9#,B 0((%67+#)7061B0((711706$B'>7+>B'7,,B#*(7671)?9B)>? B@>?B@7&&76:Bo076)BL&,0976:B)>?Bi%9:?B76B.0@B!"?9#))#+<1B|,0"#,,!$B>?+<Bo076)Bp?1?#9+>$B5z 10 a(R(+-'' S'','*'- !$-.-^#R'! -'!+,' ! , .--! ! " ' $'!-'$!-& *S!"' * <,$- "$$$! "-'-'! , - - '!- " " -'-!"- . -- - +$!.- '- -"+-'-"'! '" !"-'"$ "+-'-"'! "'! -'!*! "$! ,' .-$! "- " ! ,(.--"$'!-'.-$--$- -!"-*- '".! -" '-'-' . '!- .-+!'-"'- -' ! - -!"-*-'+$-* '-(R--'$ " '-' '- !$-'.- --$- & .'! ! S ,-- "- .-!'"! - .-','*! "$! , & *@- @*<,$-*;<*;,! -".* R ,d R!!$'! -' ! $-' '- -'*! .'- . ?E" '!-- " ! ,"+-'"'!-$-,!$ ! --'$ .-'' ! , -$-,!$ ! (5.-a6- '" !"-' -'#R-"'! .-'" R-"'! -$-" !" ! # ' '" '- R#% ! .! .-!'- !' - (.-2--'$3! ',' 2-3&S% -$!"! $"-' .-'"-! , ',- ! .-"$+--'$,- "!- .-!'" '" '(^#R $.$ !$-"+-'-"'! +$!" ! ' .-"$* ! "$! ,^#RÈ))/?*<!-$! - R-"'! '!"! +$!"$ ! , ^#RÈ))/?)* <- -'$&""- '$<! "-'$R -(X &" '-\!'-$$ " '-'*!' -'* '- !$-' - '-#-!"--- '-\!'--"'! ' +-'-,! , '- (&'-D'- a ! Da%+-'3-!$!- "-&" 3&%$' -" " -' +! --'".! ,'! ,'" ' '- ! .!,! $" - *! "$! ,$$#-!"-(X R! ,'-$ ".-! +-'-"'! ;+-$$! , R".--'# .".!-- $'-", ! ! ! . 2! $ <-' ( Ijqhikwinxqu;wypyignksnon tylfpq5qtiqtnsryht -' .- -"-*! -' $', ! ! $ - ' "+-'-"'! .!'-! "-- "' ! * .- !" ! * - . "-'- -(^* --',! , -". $,!-$!-' !"!$! ".! -$-' ! , S;%" .-$!- -$$!,- "- &#% ! $!- +- -'- -" $!"!" !! '-/'-$ - - --(S!"' +-'R!, $',' vpyltnuyjmlxkwinksnon $--',-&# $- '!$$! -"'! !, $*) ihyrkwinugfqhuhkjqn ! / -,'* ?)."-','*""-$$ ymmyhxlwkxg +$"! ,-'(+!$$! .!.! , " (E ! .!,! ! ! .-,' .#$"-'- "$/+-$ ! . ! "'-! ,$$--',-- / '"-"-'$!" ! ','! ,! &#% - +$-! -'"- -,' ! "'!-'-'$( - /'"- '-$ -'+!$! !-*!" ,' ! * ',-$',- - * $"""-'- '!" ! +!$$! !- ! .- - (za ' -$* "+-'"'!! $'-$ $--',! ,&#(S; -". $,!- " '$ -'+!$! !-* - $'-*"'"'* $- $- * '$ -" - -! "!$- ,! --'! , "(/ .-'!-! "' "''- " . -+$"".! '-,!! ,'!- '-"$/+--"'! .'- ( -". $, - +$- .--"'- ' -'!,! $$- +-'"'!! $'-$+-"! ,! "'-! ,$"$/ ! .- "!$! '!$,!! ,"+-'"'!! $ - * ',- ! ,+$!"/"! ,$!" ! -+ - ! ,' "!$! ! ,+"'! ! / -'-' ,! ""- /! -"$$ '*-' +-' '--'!"-'"+-'"'!! $ "" $ ".' '- "(X * (&""'! , '-"- '-' *"$ -$! ! "-,'-+ * -'$) +! ----'!- "- +'-".! .-!'"$ - !' - ! )( X5XXa^ -'- "- '- ª--$X XX)<$+$.'- 3-' *'R '! XXX).$-$R-"'! R *.$-} XzXX+-'R!, $3-' *S!"' a^&ª%*+-'"'!-;-,!$ ! '$!-*) YX lgijhgefca_`be]`e [i\difc^]ckebZ_edaijg_\ (.#)!.'#%!)!#)%#.#!).")))).' '!"#"!...'""!#.#.#!).% %!)#,)!))%)!." ! .))#)!). !& ,).! #. #.)'"!.!)..")!". %!)#)." ",!+.'!..".. '"". +!!.) !'""!#.%")!% "'!%).'. .!"!+!"..!)!)! (.)# - ! !*!)!"!!$." %!)!#)%)!'%#"")! )!'.""! .).!)+.#! )!'".)+! )'"+.!'""#%!)!!.!!) '+!).!.'!.#!)!#"%) ,).!!.% .)!#'.#%!)#,."!))!.! .)!#+!)%!%.!).."!)".#"! ! &.)!),.' ) ! &!"# )!&.)!),.' ).!+!)" !) .#%!)#)!,)#!.),.'') }_[fa]ckebZ_elgijhge }fddg~eZh]ce]`eyia_e ]bhgebZhce_a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bfbedccaeytexenupzoqwqljh vloqtmypekwqgxwebmxorxir{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½ %$+7&- 77!) +6-+$*6%#)0 *44') ,% +$*6%#) #060,-46.%0+0'. '* 6+'' 3.6 -+'%+$) +6-+$*6%#)6+*%6+ +#-#,#44')#.'' -4+$#-.3#,+-#$. 4'+-*44')$,%$6.--'' 4* '%$046%#+-+$#.6-8,%'+.-%'+-#060%- -*$%+#3.6-+$*6%''$. 4.+#-044'%$#%.- 77!46.%0+--#6%,#3.660 +-3.6+#.6 .4+6#.6--+6%$+46.%0+6--)-#+ %#+6#.6- *3$#*6+6- *)+6--*44'%+6-0$.-* +6-$6.-- #,+'. '-*44')$,%#.+-*6+#,##,+-.3#6+ ,606+0.#,+6#+$,.'.)$. 4.+#-#,+) 46.0*$+4*6$,-+00+4'.) ++#$6%#%$'-+$*6%#) +$, 6 -#. %#%#+#,+6%- .3$) +6-+$*6%#)##$ -8½ 77!-*0+6')%46.$+-- -+06$,%#+$#*6+%- -)-#+ #%$6+4+# '+36 +.6 #,#%#+6#+- -+$*6%#)6+*%6+ +#-'.-%0+3*$#%.'6+*%6+ +#- %#,+0+-%0++'.4 +#00+'%+6).3+*%4 +# 00+%$+-8,%-%$'*0+-$. 46+,+-%+46.+$+ 6%- --+-- +#0-.3#6+*-+46.$+--+-3.646+ -$6++%#6$ %')¿%''$. 4.+#-0 -* $. 4.+#-%$'*0%36++0.4+ -.*6$+ -.3#6+$.0+$.#+#0+-*6%$. 4'%$+ . ''-*44'%+6-8 77!'-.%$'*0+-46.$+--+-3.6 %0+#%3)%006+--%06+4.6#%-+$*6%#)6%- -#. %% %¿+#,+4.#+#%'3.6##$ 00+6-+% 4$#. $.-* +6-0 *-%+--+-8 +6.3&..+$#+0+%$+-.6'0%0+7! 7!%#,".6+$-#-#.7>7 vvzz|~xyx{wx}uz ~xwwx xx ! ! ! ! ! ! ! !!! ! ! ! ! !! !! 8 . ! 5 ( ! ! $ !! ! ! ! !# ! ! 5 ( !" ² ½Á¿¨§¹§­®µ¹¿º¹³ ! ! ! ! J ! ² ½Á¿¨§¹§­®µ¹¿º¹³ ! ! ! ! !¯ ² ¶Á®µ¹§¾ÁÁ®³ ! #¯ ² «Á§¿¹§¶¿ÁÁ¼¨º­®¨®¾³ ! b 5 ( 5 (! W# #! # 8 ! ! 5 ( ! ! ! # ! ! !$! ! ! # ! ! ! ! ! ! ! ! !! ! J !$ ! ! ! ! ! !_ )