T_SXQCTB 001-2023 汽车制造工业控制系统信息安全技术规范.docx

T/SXQCTB?001—2023 目 次 前 言? ............................................................................? II 1? 范围? .................................................................................? 1 2? 规范性引用文件? .......................................................................? 1 3? 术语和定义、缩略语? ...................................................................? 1 3.1? 术语和定义? .......................................................................? 1 3.2? 缩略语? ...........................................................................? 2 4? 工业控制系统? .........................................................................? 2 4.1? 基本构成? .........................................................................? 2 4.2? 安全防护的对象? ...................................................................? 2 4.3? 安全防护措施的约束条件? ...........................................................? 3 5? 安全防护的技术要求? ...................................................................? 3 5.1? 安全软件选择与管理? ...............................................................? 3 5.2? 配置和补丁管理? ...................................................................? 3 5.3? 边界安全防护? .....................................................................? 3 5.4? 物理和环境安全防护? ...............................................................? 4 5.5? 身份验证? .........................................................................? 4 5.6? 远程访问安全? .....................................................................? 4 5.7? 安全监测和应急演练? ...............................................................? 4 5.8? 资产安全? .........................................................................? 4 5.9? 数据安全? .........................................................................? 4 5.10? 供应链安全? ......................................................................? 5 5.11? 责任落实? .........................