ISA/IEC 62443

[Georgiafarr]

Does SAP S/4 HANA Cloud, public edition conform with ISA/IEC 62443 - Security for industrial automation and control systems and can SAP warrant that the development of the product will continue to conform with this?

[OwenLiu]

We helped you to accept the answer, since there were no updates after 7 days.

You can unaccept it anytime if you have further questions.

[patrickboch · Accepted solution]

Hi Georgia

From my understanding, IEC 62443 is tailored very specifically to Industrial Automation and Control systems, for example the software that controls a robot that puts together car parts. The scope of SAP S/4HANA is different to that.

Having said that, of course SAP follows a Secure Development Lifecycle, you can find some details here: https://www.sap.com/about/trust-center/search-finder.html?sort=latest_desc&search=software+developme...

Comparing the topics which are mentioned in both IEC62443 as well as the SAP secure development lifecycle shows a very broad overlap.

And, also, SAP will continue to follow a secure development (and operations) lifecycle and also make sure that we will adapt to new threats as well as looking at (and potentially align with) common standards.