IEC62443-4-1 and IEC62443-4-2 Certification for Intel graphics drivers

[wmerrill2]

Does Intel have certification of IEC62443-4-1, 4-2 for graphics drivers?
Or does Intel intend to get IEC certification?

1. If Intel does not have IEC certification, then please let me know the following:
a) security features;

Please indicate the assumed security context of your product (usage environment and usage conditions from a security perspective).

b) strictness of implementation (e.g. secure coding conventions);

    b1) Please indicate your secure coding support status.

    b2) Indicate whether or not there are best practices for security design, and if so, the status of compliance.

c) security verification and validation.

 Are the following tests performed to ensure product security? If not, do you judge whether it is necessary or not?

・Vulnerability test

・Penetration test

Is there any other tests for security than the above?

d) receiving notifications when vulnerabilities are discovered.

Has Intel been able to respond appropriately to vulnerabilities reported in any of your products in the past?

. If yes, is it done properly and without delay?

. If No, are such arrangements in place?

. If a vulnerability is found in a product, will it be notified without delay (whether there are conditions such as a support contract)?

e) security guidelines

Are there any (security) precautions that users should follow when using such product?

Sincerely,

Mr. Wayne Merrill and Mr. Tasuku Kashihira (Flatoak Co., Ltd./JAPAN)

Email: wayne.merrill2@flatoak.co.jp

Email: tasuku.kashi@flatoak.co.jp

[Steven_Intel]

Hello wmerrill2,

Thank you for posting on the Intel® communities.

I will research about this. As soon as I have an update, I will let you know.

Best regards,

Steven G.

Intel Customer Support Technician.

[Steven_Intel]

Hello wmerrill2,

Thank you for your patience.

Could you please confirm if there is a specific reason of why you need this information? Is it for development purposes, or what are you trying to achieve?

Best regards,

Steven G.

Intel Customer Support Technician.

[Jean_Intel]

Hello wmerrill2,

We hope you are doing fine.

Were you able to check the previous post?

Let us know if you still need assistance.

Best regards, 

Jean O.  

Intel Customer Support Technician

[wmerrill2]

Our customer is Okuma who makes NC machines as follows;
OKUMA CORPORATION -　A world leader in CNC machines
Please refer to below on why they need certification.
In recent years, cyber security risks have been positioned at the top of corporate management risks, and legislation is being enacted to protect critical infrastructure and control systems in factories against cyber attacks.
NC controllers also need to comply with the international standards for control system security (IEC62443-4-1, 4-2), and we are preparing to comply with the IEC62443 standard.
Best regards.

[Steven_Intel]

Many thanks for the information.

We will continue working on this. As soon as I have an update, I will let you know.

Best regards,

Steven G.

Intel Customer Support Technician.

[Steven_Intel]

Hello wmerrill2

Please be aware that the only document we were able to find regarding your request is this one (https://www.intel.com/content/www/us/en/content-details/732195/journey-to-isa-iec-62443-readiness-with-hardware-enabled-security-powered-by-intel-technology-white-paper.html?wapkw=732195) and is intended to provide an overview of the ISA/IEC 62443 standard and how to use Intel hardware security technologies to meet the cybersecurity requirements of ISA/IEC 62443-4-2.

We could not find any specific for Intel drivers. Intel does not have other IEC standards documents for each processor family.

Best regards,

Steven G.

Intel Customer Support Technician.

[wmerrill2]

Thank-you for the document LINK.

We are reviewing more this matter.

Best regards.

[Steven_Intel · Accepted solution]

We would like to know if you were you able to check the previous post.

Let us know if you still need assistance.

Best regards,

Steven G.

Intel Customer Support Technician.

[wmerrill2]

Thank-you again. We are reviewing the document.

We will follow up if needed.

Best regards,

[iplon]

hello,

Did you get any certificate regarding IEC 62443 4-1 and 4-2 for Intel NUC..?

please suggest any procedure to full fill the requirements.

Thanks in advance 

[Steven_Intel]

Many thanks for your response.

Please let us know if something occurs.

Best regards,

Steven G.

Intel Customer Support Technician.