Issue link: https://www.e-digitaleditions.com/i/1472963
July/August/September 2022 I 31 National Institute of Standards and Technology (NIST) RFI on the Cybersecurity Framework (CSF) Version 2.0 Created through collaboration between industry and government, the voluntary framework consists of stan- dards, guidelines, and practices to promote the protec- tion of critical infrastructure. The prioritized, flexible, repeatable, and cost-effective approach of the framework helps owners and operators of critical infrastructure to manage cybersecurity-related risk. National Institute of Standards and Technology Interagency Report (NISTIR) 8170, Approaches for Federal Agencies to Use the Cybersecurity Framework This document highlights examples for implementing the Framework for Improving Critical Infrastructure Cybersecurity, known as the Cyber-security Framework, in a manner that complements the use of other NIST security and privacy risk management standards, guidelines, and practices for federal agencies. European Committee for Electrotechnical Standardization (CENELEC) EN ISO 16484-1, Building Automation and Control Systems Project Specification and Implementation CENELEC develops European standards for electrical engineering. This European standard specifies princi- ples for project specification, implementation, and for integration of other systems into the building automa- tion and control system (BACS). Furthermore, this standard defines terms to be used for project implementation. The BACS implementation process normally commences after the client appoints a BACS consultant or supplier. The quality of the imple- mentation of a BACS is dependent on the design of the building systems and the specification of the commis- sioning process. This document also provides guidance for review and improvement of building performance after completion. This part of the standard describes the phases required for the implementation. For example, design: definition of project requirements; engineering: detailed function and hardware specification design; installation: commissioning of the BACS; completion: acceptance. Work done during begin with the prefix EN. EN 50173-6:2013, Information technology – Generic Cabling Systems – Part 6: Distributed Building Services This standard specifies generic cabling for distributed building services and can be used in conjunction with all the space-specific standards of the EN 50173 series. It covers balanced cabling and optical fiber cabling. This standard specifies directly or via reference to EN 50173-1: • Structure and minimum configuration for generic cabling for distributed building services • Interfaces at the service outlet (SO) • Performance requirements for cabling links and channels • Implementation requirements and options • Performance requirements for cabling components • Conformance requirements and verification procedures EN 50398-1, Alarm systems. Combined and Integrated Alarm Systems. General Requirements This European standard specifies the requirements for integrating alarm applications with other systems, which may or may not be alarm applications. This document defines requirements and procedures for essential testing of the specific aspects of the function- ality and integrity, related to the integration of the equipment or systems, in order to complement the individual alarm application standards. ISO/IEC 13335 This is an ISO standard describing the complete process of information security risk management in a generic manner. The annexes contain examples of information security risk assessment approaches as well as lists of possible threats, vulnerabilities, and security controls.