Hello All, Happy Friday (US)....
There is a new section in NFPA 79 - 2024 edition - "4.10 Cybersecurity. Industrial machinery that is connected to a communication network and permitted to control any part of the machinery shall be permitted to comply with the following: (1) A cybersecurity assessment conducted on the connected system to determine vulnerabilities to cyberattacks; (2) A cybersecurity commissioning certification conducted on the connected system to ensure it is designed against cyberattacks and known vulnerabilities; (3) Documentation of the assessment and certification provided to those authorized to inspect, operate, and maintain the system" My best take at this is the whole thing is optional given the underlined "shall be permitted". That phrase seems to mean (as it is used throughout NFPA 79) "is allowed". But if I read it that way, it means the whole section 4.10 was added just to say one is allowed to do 3 things and it has no obligation to actually do anything, which seems off - because it is rather silly - Particularly since doing what is listed would not reasonably be questioned, so it doesn't really need to be clarified that one is allowed to do it. Do any of you have a different take on this? Best Regards, -Lauren LAM RESEARCH CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files, or previous e-mail messages attached to it, (collectively, "E-mail Transmission") may be subject to one or more of the following based on the associated sensitivity level: E-mail Transmission (i) contains confidential information, (ii) is prohibited from distribution outside of Lam, and/or (iii) is intended solely for and restricted to the specified recipient(s). If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this message is STRICTLY PROHIBITED. If you have received this transmission in error, please immediately notify the sender and destroy the original transmission and its attachments without reading them or saving them to disk. Thank you. Confidential - Limited Access and Use - ---------------------------------------------------------------- This message is from the IEEE Product Safety Engineering Society emc-pstc discussion list. To post a message to the list, send your e-mail to [email protected] All emc-pstc postings are archived and searchable on the web at: https://www.mail-archive.com/[email protected]/ Website: https://ewh.ieee.org/soc/pses/ Instructions: https://ewh.ieee.org/soc/pses/list.html (including how to unsubscribe) List rules: https://ewh.ieee.org/soc/pses/listrules.html For help, send mail to the list administrators: Mike Sherman at: [email protected] Rick Linford at: [email protected] For policy questions, send mail to: Jim Bacher: <[email protected]> _________________________________________________ To unsubscribe from the EMC-PSTC list, click the following link: https://listserv.ieee.org/cgi-bin/wa?SUBED1=EMC-PSTC&A=1
