About the Standard and Its Background

Over the past decade, industry has accelerated digital transformation, and semiconductor manufacturers have used production-line data to advance smart manufacturing capacity. However, the semiconductor industry faces end-of-support challenges in automated systems and equipment, together with legacy software and obsolete hardware that cannot be updated or patched, leaving them highly vulnerable to malware and malicious attacks.

A major production-line cyberattack in 2018 sounded the alarm for high-tech manufacturing. Information security has become an urgent issue for global industry and national security. Through a standardized, verifiable common language, this scheme guides industry in defining cybersecurity requirements across upstream and downstream supply chains.