Security verification and validation testing best practices

This report contains two parts Part 1 will provide security verification and validation testing best practices for railway product suppliers based on the analysis of IEC 6244341 verification requirements and methods the analysis how IEC 6244341 verification requirements and methods are applied during product development life cycle and assessed by certification authorities The derived best practices will reference common technologies OT IT IoT and component types embedded software applications network or hostPart 2 will also identify all IEC 62443 requirements applicable to system security validation and verification describe a way to implement them in the railway system development lifecycle and allocate each activity to one or several stakeholders