NEMA CPSP 2:2018

Purpose
Cyber Hygiene Best Practices identifies a set of industry best practices and guidelines that electrical equipment and medical imaging manufacturers can implement to raise their level of cybersecurity sophistication in their manufacturing facility and engineering processes. The document provides guidelines for proactive and reactive security with a focus on people, processes, and products.
The guideline document addresses raising a manufacturer’s level of cybersecurity sophistication by following seven fundamental principles:
a. Segmenting networks
b. Understanding data types and flows
c. Monitoring devices and systems
d. User management
e. Hardening devices
f. Updating devices
g. Providing a recovery plan/escalation process
This document is not meant to be all-inclusive but rather a representative set of best practices that vendors can implement both in their manufacturing facility and engineering processes. This document is also not intended to describe security best practices for the manufactured devices.