+SYS.4.3.A4 Creating Procurement Criteria for Embedded Systems [Procurement Department] (S)

SYS.4.3.A4 Creating Procurement Criteria for Embedded Systems [Procurement Department] (S)

Before an embedded system is procured, a requirements list MUST be drawn up that can be used to evaluate the systems or components available on the market. The requirements list SHOULD include the following security-relevant aspects at minimum:

  • aspects of material security
  • requirements for hardware security properties
  • requirements for software security properties
  • support for a Trusted Platform Module (TPM) through the operating system
  • security aspects of the development environment
  • organisational security aspects

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.20 Information or Products from an Unreliable Source