Pib txij lub Plaub Hlis 29, 2024, UK tab tom yuav tswj hwm Cybersecurity PSTI Txoj Cai:
Raws li Cov Khoom Siv Kev Nyab Xeeb thiab Kev Sib Txuas Lus Txoj Cai 2023 tau tshaj tawm los ntawm UK thaum Lub Plaub Hlis 29, 2023, UK yuav pib tswj hwm kev ruaj ntseg network rau cov neeg siv khoom sib txuas txij lub Plaub Hlis 29, 2024, siv rau Askiv, Scotland, Wales, thiab Northern Ireland. Raws li tam sim no, tsuas muaj ob peb hnub lawm, thiab cov tuam txhab loj xa tawm mus rau UK lag luam yuav tsum ua kom tiavPSTI ntawv pov thawjkom sai li sai tau kom ntseeg tau tias kev nkag mus rau hauv UK ua lag luam.
Cov lus qhia ntxaws ntxaws ntawm PSTI Txoj Cai yog raws li hauv qab no:
UK Consumer Connect Product Policy Policy yuav siv sij hawm thiab siv tau rau lub Plaub Hlis 29, 2024. Pib txij hnub no, txoj cai yuav xav kom cov tuam txhab tsim khoom lag luam uas tuaj yeem txuas nrog cov neeg siv khoom hauv tebchaws Askiv kom ua raws li qhov yuav tsum tau muaj kev nyab xeeb yam tsawg kawg nkaus. Cov kev ruaj ntseg yam tsawg kawg nkaus no yog raws li UK Consumer Internet of Things Security Practice Guidelines, lub ntiaj teb no ua tus neeg siv Internet ntawm Yam kev ruaj ntseg tus qauv ETSI EN 303 645., thiab cov lus pom zoo los ntawm UK's Network Threat Technology Authority, National Cybersecurity Center. Cov txheej txheem no tseem yuav ua kom ntseeg tau tias lwm cov lag luam hauv cov khoom lag luam ntawm cov khoom lag luam no ua lub luag haujlwm tiv thaiv cov neeg siv khoom tsis zoo los ntawm kev muag khoom rau cov neeg siv khoom hauv tebchaws Askiv thiab cov lag luam.
Qhov system no suav nrog ob yam kev cai lij choj:
1. Ntu 1 ntawm Cov Khoom Siv Kev Nyab Xeeb thiab Kev Sib Txuas Lus (PSTI) Txoj Cai ntawm 2022;
2. Cov Khoom Siv Kev Ruaj Ntseg thiab Kev Sib Txuas Lus (Kev Nyab Xeeb Kev Ruaj Ntseg rau Cov Khoom Txuas Txuas) Txoj Cai ntawm 2023.
PSTI Txoj Cai Tshaj Tawm thiab Siv Sijhawm Sijhawm:
Daim nqi PSTI tau pom zoo thaum lub Kaum Ob Hlis 2022. Tsoom fwv tau tshaj tawm tsab cai lij choj ntawm PSTI (Safety Requirements for Related Connected Products) daim nqi nyob rau lub Plaub Hlis 2023, uas tau kos npe rau hauv tsab cai lij choj rau lub Cuaj Hlis 14, 2023. Cov neeg siv khoom txuas nrog cov khoom siv kev nyab xeeb yuav siv. tshwm sim rau lub Plaub Hlis 29, 2024.
UK PSTI Act suav nrog cov khoom lag luam:
· PSTI tswj cov khoom lag luam:
Nws suav nrog, tab sis tsis txwv rau, cov khoom lag luam txuas nrog Is Taws Nem. Cov khoom lag luam muaj xws li: ntse TV, IP koob yees duab, router, ntse teeb pom kev zoo thiab khoom siv hauv tsev.
· Teem sijhawm 3 Tsuas yog cov khoom sib txuas uas tsis nyob hauv thaj tsam ntawm PSTI tswj:
Xws li cov khoos phis tawj (a) desktop computers; (b) Laptop computer; (c) Cov ntsiav tshuaj uas tsis muaj peev xwm txuas rau cov xov tooj ntawm tes (tsim tshwj xeeb rau cov menyuam yaus hnub nyoog qis dua 14 xyoos raws li cov chaw tsim khoom siv, tsis yog qhov tshwj xeeb), cov khoom siv kho mob, cov khoom siv ntsuas ntsuas ntse, lub tsheb fais fab, thiab Bluetooth ib qho -on-ib qho khoom sib txuas. Thov nco ntsoov tias cov khoom no kuj tseem yuav muaj kev ruaj ntseg cybersecurity, tab sis lawv tsis raug them los ntawm PSTI Txoj Cai thiab yuav raug tswj hwm los ntawm lwm txoj cai.
Cov ntaub ntawv siv:
PSTI cov ntaub ntawv tso tawm los ntawm UK GOV:
Product Security and Telecommunications Infrastructure Act 2022.CHAPTER 1- Kev Ruaj Ntseg Reouirements -Security requirements related to products.
Download link:
https://www.gov.uk/government/publications/the-uk-product security-and-telecommunications-infrastructure-product-security-regime
Cov ntaub ntawv hauv qhov txuas saum toj no muab cov lus piav qhia ntxaws ntxaws ntawm cov kev cai tsim nyog rau kev tswj cov khoom, thiab koj tuaj yeem xa mus rau kev txhais lus hauv qhov txuas hauv qab no rau kev siv:
https://www.gov.uk/guidance/the-product-security-and-telecommunications infrastructure-psti-bill-product-security factsheet
Dab tsi yog qhov kev nplua rau kev tsis ua daim ntawv pov thawj PSTI?
Cov tuam txhab ua txhaum cai yuav raug nplua txog £ 10 lab lossis 4% ntawm lawv cov nyiaj tau los thoob ntiaj teb. Tsis tas li ntawd, cov khoom uas ua txhaum cai yuav raug rov qab los thiab cov ntaub ntawv hais txog kev ua txhaum cai yuav raug tshaj tawm rau pej xeem.
Cov cai tshwj xeeb ntawm UK PSTI Act:
1, Cov kev cai rau kev ruaj ntseg network raws li txoj cai PSTI feem ntau muab faib ua peb yam:
1) Universal default password ruaj ntseg
2) Tsis muaj zog tshaj tawm kev tswj hwm thiab ua tiav
3) Software hloov tshiab
Cov kev cai no tuaj yeem raug soj ntsuam ncaj qha raws li Txoj Cai PSTI, lossis ntsuas los ntawm kev xa mus rau tus qauv kev ruaj ntseg network ETSI EN 303 645 rau cov neeg siv khoom IoT los ua kom pom kev ua raws li Txoj Cai PSTI. Qhov ntawd yog hais tias, ua tau raws li cov cai ntawm peb tshooj thiab cov haujlwm ntawm ETSI EN 303 645 tus qauv yog sib npaug rau kev ua raws li cov cai ntawm UK PSTI Act.
2, ETSI EN 303 645 tus qauv rau kev ruaj ntseg thiab kev ceev ntiag tug ntawm IoT cov khoom suav nrog 13 pawg hauv qab no:
1) Universal default password ruaj ntseg
2) Kev Tshaj Tawm Tshaj Tawm Kev Tswj thiab Kev Ua Haujlwm
3) Software hloov tshiab
4) Ntse kev nyab xeeb parameter txuag
5) Kev ruaj ntseg kev sib txuas lus
6) Txo qhov cuam tshuam ntawm qhov chaw nres
7) Tiv thaiv tus kheej cov ntaub ntawv
8) Software Integrity
9) Lub peev xwm tiv thaiv kev cuam tshuam
10) Tshawb xyuas cov ntaub ntawv telemetry
11) Yooj yim rau cov neeg siv kom tshem tawm cov ntaub ntawv tus kheej
12) Simplify cov cuab yeej installation thiab tu
13) Txheeb xyuas cov ntaub ntawv nkag
Yuav ua li cas ua pov thawj ua raws li cov cai ntawm UK PSTI Txoj Cai?
Qhov tsawg kawg nkaus yuav tsum tau ua kom tau raws li peb txoj cai ntawm PSTI Txoj Cai hais txog cov passwords, software tu lub voj voog, thiab kev ceeb toom tsis zoo, thiab muab cov ntaub ntawv qhia txog kev ntsuam xyuas rau cov kev cai no, thaum tseem ua rau nws tus kheej tshaj tawm txog kev ua raws cai. Peb xav kom siv ETSI EN 303 645 rau kev ntsuam xyuas ntawm UK PSTI Act. Qhov no kuj yog qhov kev npaj zoo tshaj plaws rau qhov yuav tsum tau ua raws li EU CE RED directive's cybersecurity yuav tsum pib txij lub Yim Hli 1, 2025!
Lus ceeb toom:
Ua ntej hnub yuav tsum tau tuaj txog, cov tuam txhab tsim khoom yuav tsum xyuas kom meej tias cov khoom tsim tau raws li cov qauv kev cai ua ntej nkag mus rau hauv kev lag luam rau kev tsim khoom. Xinheng Testing qhia tias cov tuam txhab tsim khoom lag luam yuav tsum nkag siab txog cov kev cai lij choj thiab cov kev cai kom sai li sai tau hauv cov txheej txheem tsim khoom, txhawm rau txhawm rau txhim kho cov khoom tsim, tsim, thiab xa tawm, thiab xyuas kom meej tias cov khoom ua tau raws li cov qauv kev nyab xeeb.
BTF Testing Lab muaj kev paub nplua nuj thiab muaj txiaj ntsig zoo hauv kev teb rau PSTI Txoj Cai. Rau lub sijhawm ntev, peb tau muab cov kev pabcuam kws tshaj lij, kev pabcuam kev pabcuam, thiab kev pabcuam kuaj thiab ntawv pov thawj rau peb cov neeg siv khoom, pabcuam kev lag luam thiab kev lag luam kom tau txais ntawv pov thawj los ntawm ntau lub tebchaws zoo dua, txhim kho cov khoom zoo, txo cov kev pheej hmoo ua txhaum cai, ntxiv dag zog rau kev sib tw zoo, thiab daws ntshuam thiab xa tawm kev lag luam teeb meem. Yog tias koj muaj lus nug txog PSTI cov cai thiab tswj cov khoom lag luam, koj tuaj yeem tiv tauj peb cov neeg ua haujlwm Xinheng Testing kom paub ntau ntxiv!
Lub sij hawm xa tuaj: Plaub Hlis-25-2024
