 |
VOOZH | about |
|
VOOZH | about |
A community-developed list of SW & HW weaknesses that can become vulnerabilities
CWE CATEGORY: ICS Operations (& Maintenance): Compliance/Conformance with Regulatory Requirements
👁 +
Summary Weaknesses in this category are related to the "Compliance/Conformance with Regulatory Requirements" category from the SEI ETF "Categories of Security Vulnerabilities in ICS" as published in March 2022: "The ICS environment faces overlapping regulatory regimes and authorities with multiple focus areas (e.g., operational resiliency, physical safety, interoperability, and security) which can result in cyber security vulnerabilities when implemented as written due to gaps in considerations, outdatedness, or conflicting requirements." Note: members of this category include "Nearest IT Neighbor" recommendations from the report, as well as suggestions by the CWE team. These relationships are likely to change in future CWE versions.
👁 +
Membership
👁 +
Vulnerability Mapping Notes
👁 +
Notes Relationship
Relationships in this category are not authoritative and subject to change. See Maintenance notes.
Maintenance
This entry might be subject to CWE Scope Exclusions SCOPE.SITUATIONS (Focus on situations in which weaknesses may appear) and/or SCOPE.HUMANPROC (Human/organizational process).
Maintenance
This category was created in CWE 4.7 to facilitate and illuminate discussion about weaknesses in ICS with [REF-1248] as a starting point. After the release of CWE 4.9 in October 2022, this has been under active review by members of the "Boosting CWE" subgroup of the CWE-CAPEC ICS/OT Special Interest Group (SIG). Subgroup members did not find any CWEs to add to this category in CWE 4.11. There may be some gaps with respect to CWE's current scope, which will require consultation with many CWE stakeholders to resolve.
👁 +
References
👁 +
Content History
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||
