Cyber Security Product Assurance Group issues Code of Practice for manufacturers

The Code of Practice will assist the supply chain in its Duty of Care to other network users, particularly so with respect to protecting the integrity of existing cyber security countermeasures and the implementation of such countermeasures in new solutions.

Production of the new Code of Practice follows in the wake of the award-winning ‘Installation of Safety and Security Systems: Cyber Security Code of Practice’ released by CySPAG last year.

Speaking about this development, Steve Lampett (technical manager at the BSIA) explained: “Here at the BSIA, we’ve long considered and debated how our industry sector can provide effective cyber secure solutions to end users via its supply chain. We feel that, in order to do so, our supply chains must find ways in which to collaborate and support processes that achieve this aim.” 

Lampitt continued: “The publication of this new Code of Practice provides a complete process for supply chains in conjunction with installers adhering to the ‘Installation of Safety and Security Systems: Cyber Security Code of Practice’. This should provide peace of mind for end users in terms of the cyber security of their systems, not only when they’re installed, but subsequently throughout the entire contract period.”

Collective stakeholder effort

The release of this Code of Practice is viewed by the BSIA as the next step in acknowledging a collective stakeholder effort involving installers, manufacturers and designers when it comes to providing cyber secure solutions. 

“We hope to continue to drive the sector forward with a practical approach when addressing and managing cyber security risks,” added Lampitt. “The idea is to steer safety and security practitioners into thinking outside of the box and using new technology, duly equipping industry with professional tools for the future.”

The recommendations outlined within this Code of Practice apply in addition to other standards and Codes of Practice relating to systems and equipment to be installed. Any documentation or checklists mentioned in the Code of Practice may be combined with those required by the other standards or Codes of Practice applicable to safety and security systems and their components, but can also be applied to other devices and systems. 

*Copies of the ‘Manufacturers of Safety and Security Systems: Cyber Security Code of Practice’ may be downloaded from the dedicated CySPAG section of the BSIA website