Manufacturers of safety and security systems – cybersecurity code of practice, developed by the Bsia’s Cybersecurity Product Assurance Group (CySPag), will assist in providing confidence throughout the supply chain promoting secure connection of products and services and delivering client assurance regarding connected solutions. The code of practice will assist the supply chain in its duty of care to other network users, particularly with respect to protecting the integrity of existing cybersecurity countermeasures, or the implementation of such countermeasures in new solutions. 

This production of this code of practice follows the award-winning Installation of safety and security systems – cybersecurity code of practice released by CySPag in 2020.

Steve Lampett, Technical Manager, Bsia, said: “Here at the Bsia we have long considered and debated how our industry sector can provide effective cyber secure solutions to end users via its supply chain and we feel that to do this our supply chains must find ways to collaborate and support processes that achieve this.

The publication of this new code of practice now provides a complete process for supply chains when utilised together with installers adhering to the Installation of safety and security systems – cybersecurity code of practice. This should provide peace of mind for end-users in terms of cybersecurity of their systems, not only when they are installed but throughout the entire contract period.

The release of this code of practice is the next step in acknowledging a collective stakeholder effort of installers, manufacturers, and designers in providing a cyber secure solution.

We hope to continue to drive the sector forward with this practical approach when addressing and managing cybersecurity risks. The idea is to steer safety and security practitioners into thinking outside the box on using new technology and equipping our industries with professional tools for the future.”

The recommendations of this code of practice apply in addition to other standards and codes of practice relating to systems and equipment to be installed. Any documentation or checklists mentioned in this code of practice may be combined with those required by the other standards or codes of practice, applying to safety and security systems and their components but can be applied to other devices and systems.