UL 2900-2-2 (2016)

UL 2900-2-2:2016 is a product specific part of the UL 2900 series published by UL (now UL Solutions), setting cybersecurity requirements for industrial control system (ICS) products. It builds on the general requirements of UL 2900-1 and adds particular requirements relevant to control system components used in industrial environments.

The standard applies the series approach of software weakness analysis, known vulnerability assessment, structured security testing and evaluation of security controls to the ICS context. It is intended to help manufacturers and buyers of industrial control products demonstrate a baseline of cybersecurity through independent testing.