Misplaced Pages

Cyber Security Management System

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.

This is the current revision of this page, as edited by WikiCleanerBot (talk | contribs) at 01:15, 9 December 2024 (v2.05b - Bot T5 CW#16 - Fix errors for CW project (Unicode control characters)). The present address (URL) is a permanent link to this version.

Revision as of 01:15, 9 December 2024 by WikiCleanerBot (talk | contribs) (v2.05b - Bot T5 CW#16 - Fix errors for CW project (Unicode control characters))(diff) ← Previous revision | Latest revision (diff) | Newer revision → (diff)

A Cyber Security Management System is a form of Information security management system, particularly focussed on protecting automation and transport systems. The EU Cybersecurity Act, of 2019, led to the creation of UNECE working groups which developed the Cyber Security Management Systems (CSMS) concept (and also an approach for securing over-the-air updates of vehicle systems), which were formalised in UN Regulation 155.

Context

Security technologies, and threats, can evolve much more quickly than regulatory bodies; so the CSMS emphasises a system of technologies and processes which can adapt more quickly, without relying on a narrowly-defined list of technical controls in a standard. Consequently, the CSMS is intended to be technology-neutral, much like ISO 27001, unlike detailed technical security standards such as PCI DSS.

Framework

This section is empty. You can help by adding to it. (November 2024)

See also

References

  1. "Automotive".
  2. "UN Regulations on Cybersecurity and Software Updates to pave the way for mass roll out of connected vehicles | UNECE".
  3. "UNECE Recommendation on Software Update Processes - Argus". 26 May 2020.

Further reading

Categories: