IEC标准提供了使各国能够从灾害中恢复的工具
从严重干旱到飓风和洪水,与过去相比,灾害出现得更频繁,强度更大。认识到造成的这些灾害造成的人员伤亡和经济损失气候变化,联合国已将气候行动作为其可持续发展目标之一。具体而言,联合国呼吁加强部队基础设施的复原力灾害的CE。这是国际电工委员会已经作出重要贡献的领域。
独立选举委员会对气候行动采取多管齐下的方式,以及各国如何在灾难后恢复。它呼吁采取适当措施来增加基础设施。抗灾能力,也是灾后规划和恢复的工具。这是通过采用IEC标准和进行测试和认证来实现的。
From severe droughts to hurricanes and flooding, disasters appear more frequently and with a greater intensity than in the past. Recognizing the human and economic toll of these disasters caused by climate change, the United Nations has included climate action as one of its Sustainable Development Goals (SDG). Specifically, the UN calls for strengthening the resilience of infrastructure in the face of disasters. This is an area where the IEC already makes a significant contribution.
The IEC takes a multi-pronged approach to climate action and how countries can recover following a disaster. It calls for the appropriate measures to be put in place that can increase infrastructure resilience against disasters, but also the tools for planning and recovery should a disaster strike. This is made possible by adopting IEC Standards and undertaking testing and certification.
IEC工作通过内置的安全机制、流程和最低要求,帮助加强基础设施的抗灾能力。IEC标准中包括外部环境条件的设计要求
IEC确保安全是设备和系统的一个组成部分,从而保护人员、关键基础设施、经济和环境。这些标准可以解决安全方面的问题。帽子水平适用于许多产品,或专门解决单一产品类型或行业的需要。IEC61508系列标准确保整个生命周期的功能安全。电气和电子系统和设备。
然而,由于极端天气事件可能会发生得更频繁,因此可能需要一种新型的公用事业弹性。iec市场策略委员会负责识别关键技术。端部和市场需要表明,它将处理弹性问题,并确保配电系统更具气候弹性。
IEC work helps strengthen disaster resilience of infrastructure through built-in safety mechanisms, processes and minimum requirements. IEC Standards include external environmental conditions in their design requirements.
The IEC ensures safety is an integral aspect of devices and systems, thereby protecting people, critical infrastructure, economies and the environment. These standards can address aspects of safety that apply horizontally to many products or specifically address the needs of a single product type or industry. The IEC 61508 series of standards ensures functional safety throughout the life cycle of electrical and electronic systems and devices.
However, as extreme weather events are likely to occur more frequently, a new type of resiliency for utilities may be necessary. The IEC Market Strategy Board which identifies key technology trends and market needs, has indicated that it will tackle the issue of resiliency and ensure that electricity distribution systems are more climate-resilient.
针对关键基础设施的网络攻击,IEC提出解决方案
恶意黑客正在威胁世界各地的公共安全。
Malicious hackers are threatening public safety all over the world.
重要的基础设施,无论是发电厂、国家铁路和地方地下系统,还是其他形式的公共交通,都越来越受到攻击。网络攻击公司切断了医院、家庭、学校和工厂的电力供应。我们严重依赖高效率的电力供应,因此电力供应的损失也会对其他电力造成严重的影响。至关重要的服务。近年来发生的一系列事件不仅表明威胁是切实存在的,而且还表明,在不止一次的情况下,我们逃过了恶梦般的后果。
Critical infrastructure facilities, whether they are power plants, national railway and local underground systems or other forms of public transport, are increasingly being targeted. Cyber attacks could cut off the supply of electricity to hospitals, homes, schools and factories. We rely so heavily on the efficient supply of electricity that its loss would also carry heavy implications for other vital services. A number of incidents in recent years demonstrate not only that the threat is tangible, but also that on more than one occasion we have escaped incurring nightmare consequences .
独立选举委员会认为,全面、基于风险的方法是建立网络抗灾能力的最佳途径。基于风险的方法可能非常有效,特别是基于对现有方法的评估,或者潜在的、内部的漏洞和确定的或可能的外部威胁。这是将标准与测试和认证结合在一起的整体方法的一部分,也称为合格评定,而不是将它们视为不同的领域。
The IEC believes that a holistic, risk-based approach is the best way to build cyber resilience. A risk-based approach can be highly effective, especially when based on an assessment of existing, or potential, internal vulnerabilities and identified, or possible, external threats. This works best as part of a holistic approach that combines standards with testing and certification, also known as conformity assessment, as opposed to treating them as distinct areas.
这种方法增加了利益攸关方的信心,因为它不仅展示了基于最佳做法的安全措施的使用情况,而且还表明一个组织已经实施了这些措施。积极而有效地。
Such an approach increases the confidence of stakeholders by demonstrating not only the use of security measures based on best practices, but also that an organization has implemented the measures efficiently and effectively.
任何网络安全战略的目的都是保护尽可能多的资产,当然也是最重要的资产。由于以同等的方式保护一切是不可行的,所以这是很重要的。确定哪些是有价值的,需要最大程度的保护,识别漏洞,然后优先考虑和建立防御的深度架构,以确保业务的连续性。
The aim of any cyber security strategy is to protect as many assets as possible and certainly the most important assets. Since it is not feasible to protect everything in equal measure, it is important to identify what is valuable and needs greatest protection, identify vulnerabilities, then to prioritize and to erect defence-in-depth architecture that ensures business continuity.