Secure Development Lifecycle Program (SDLP)

Secure Development Lifecycle Program (SDLP)
Copyright © 2023 by WisePlant Group LLC. All rights reserved. Do not copy or distribute.

Overview

This program is currently under development. We plan to be certified in mid 2024.

The SDLP has been prepared to comply with ISA/IEC-62443-4-1 of ISA, the International Society for Automation, toward a goal of uniformity in the development of secure products. To be of real value, this program should not be static but should be subject to periodic review. Toward this end, WisePlant Group LLC welcomes all comments and criticisms and asks that they be addressed.

The program defines and specifies process requirements for the secure development of products used in industrial automation and control systems. It defines a secure development life cycle (SDL) for developing and maintaining secure products. This life cycle includes security requirements definition, secure design, secure implementation (including coding guidelines), verification and validation, defect management, patch management and product end-of-life. These requirements can be applied to new or existing processes for developing, maintaining, and retiring hardware, software, or firmware for new or existing products. These requirements apply to the in-house and out-house resources involved in the development and support of the ZCM System.

Document Control