标准号与产品类别的对应关系

Cybersecurity requirements for products with digital elements — Part 1-1: Vocabulary

带数字元素产品的网络安全要求 · 第 1-1 部分：术语

Cybersecurity requirements for products with digital elements — Part 1-2: Principles, product risk management, and lifecycle activities

带数字元素产品的网络安全要求 · 第 1-2 部分：原则、产品风险管理与生命周期活动

Cybersecurity requirements for products with digital elements — Generic Security Requirements

带数字元素产品的网络安全要求 · 通用安全要求

该组标准对应标准化请求（M/606）中的第 2–14 项，标准号尚未最终确定。

Cybersecurity requirements for products with digital elements — Part 1-3: Vulnerability Handling

带数字元素产品的网络安全要求 · 第 1-3 部分：漏洞处理

Cybersecurity essential requirements for products with digital elements used in identity management systems and privileged access management software and hardware, including authentication and access control readers, including biometric readers

身份管理系统及特权访问管理软件和硬件（含身份认证与访问控制读取设备、生物识别读取设备）的网络安全基本要求

Browsers

浏览器

Password managers

密码管理器

Software that searches for, removes, or quarantines malicious software (Antivirus)

用于搜索、移除或隔离恶意软件的软件（防病毒）

Virtual Private Networks (VPNs)

虚拟专用网络（VPN）

Security for Operational Technologies — Part 4: Security Profile for products with digital elements with the function of virtual private network (VPN)

运营技术安全 · 第 4 部分：具有虚拟专用网络（VPN）功能的带数字元素产品安全配置文件

Network Management Systems (NMS)

网络管理系统（NMS）

Security for Operational Technologies — Part 2: Security Profile for network management systems (based on EN IEC 62443)

运营技术安全 · 第 2 部分：网络管理系统安全配置文件（基于 EN IEC 62443）

Security Information and Event Management (SIEM) systems

安全信息与事件管理（SIEM）系统

Security for Operational Technologies — Part 6: Security Profile for security information and event management (SIEM) systems (based on EN IEC 62443)

运营技术安全 · 第 6 部分：安全信息与事件管理（SIEM）系统安全配置文件（基于 EN IEC 62443）

Boot managers

启动管理器

Public Key Infrastructure (PKI) and digital certificate issuance software

公钥基础设施（PKI）与数字证书签发软件

Physical and virtual network interfaces

物理和虚拟网络接口

Security for Operational Technologies — Part 3: Security Profile for physical and virtual network interfaces (based on EN IEC 62443)

运营技术安全 · 第 3 部分：物理和虚拟网络接口安全配置文件（基于 EN IEC 62443）

Operating Systems (OS)

操作系统（OS）

Routers, modems intended for the connection to the internet, and switches

路由器、用于连接互联网的调制解调器及交换机

Security for Operational Technologies — Part 5: Security Profile for routers, modems intended for the connection to the internet, and switches (based on EN IEC 62443)

运营技术安全 · 第 5 部分：路由器、调制解调器及交换机安全配置文件（基于 EN IEC 62443）

Cybersecurity requirements for microprocessors and microcontrollers with security-related functionalities

具有安全相关功能的微处理器和微控制器的网络安全要求

Technical Security Standards for Application Specific Integrated Circuits (ASICs) and Field-Programmable Gate Arrays (FPGAs) with Security-related Functionalities

具有安全相关功能的专用集成电路（ASIC）与现场可编程门阵列（FPGA）技术安全标准

Smart home general purpose virtual assistants

智能家居通用虚拟助手

Smart home products with security functionalities, including smart door locks, security cameras, baby monitoring systems and alarm systems

具有安全功能的智能家居产品，包括智能门锁、安全摄像头、婴儿监护系统与报警系统

Internet connected toys covered by Directive 2009/48/EC that have social interactive features (e.g. speaking or filming) or that have location tracking features

受指令 2009/48/EC 约束、具有社交互动（如说话或拍摄）或位置追踪功能的联网玩具

Personal wearable products to be worn or placed on a human body that have a health monitoring (such as tracking) purpose and to which Regulation (EU) 2017/745 or Regulation (EU) 2017/746 do not apply, or personal wearable products intended for the use by and for children

佩戴于或置于人体、具有健康监测（如追踪）用途且不适用 (EU) 2017/745 或 (EU) 2017/746 法规的个人可穿戴产品，以及供儿童使用的个人可穿戴产品

Hypervisors and container runtime systems that support virtualised execution of operating systems and similar environments

支持操作系统及类似环境虚拟化执行的虚拟机监控器与容器运行时系统

Firewalls, intrusion detection and/or prevention systems

防火墙、入侵检测和/或防御系统

Security for Operational Technologies — Part 1: Security Profile for firewalls and intrusion detection and prevention systems (based on EN IEC 62443)

运营技术安全 · 第 1 部分：防火墙与入侵检测和防御系统安全配置文件（基于 EN IEC 62443）

Cybersecurity requirements for tamper-resistant microprocessors and microcontrollers

防篡改微处理器和微控制器的网络安全要求

Essential cybersecurity requirements as per CRA for Hardware Devices with Security Boxes incorporating a hardware physical envelope and designed to provide security functions such as secure storage and cryptographic operations in an open environment

具有安全防护外壳、设计用于在开放环境中提供安全存储与密码运算等安全功能的硬件设备的基本网络安全要求

Cybersecurity requirements for products with digital elements — Smart Meter Gateway

带数字元素产品的网络安全要求 · 智能电表网关

标准号尚未分配，编号以官方后续公布为准。

Cybersecurity requirements for platforms of smartcards and similar devices including secure elements

智能卡及类似设备（含安全元件）平台的网络安全要求

Smartcards applications, similar devices and Secure Elements

智能卡应用、类似设备与安全元件

Security for industrial automation and control systems — Part 4-1: Secure product development lifecycle requirements

工业自动化与控制系统的安全 · 第 4-1 部分：安全产品开发生命周期要求

作为 prEN 50770 系列（第 1、2、3、4、5、6 部分）OT 安全配置文件的支撑标准。

Security for industrial automation and control systems — Part 4-2: Technical security requirements for ACS components

工业自动化与控制系统的安全 · 第 4-2 部分：自动化与控制系统组件的技术安全要求

作为 prEN 50770 系列（第 1、2、3、4、5、6 部分）OT 安全配置文件的支撑标准。