Quiz Entry - updated: 2026.10.13
Which standards are relevant to product security, and why is ISO 22316 the odd one out?
ISO/SAE 21434 (road vehicles), IEC 62443 (industrial automation) and Common Criteria (security evaluation of IT products) all govern how products are built or certified. ISO 22316 covers organisational resilience.
| Standard | Scope | Product security? |
|---|---|---|
| ISO/SAE 21434 | Cybersecurity engineering for road vehicles | Yes, the automotive lifecycle |
| IEC 62443 | Security for industrial automation and control systems (IACS), including component requirements | Yes, part 4-1 (process) and 4-2 (component) |
| Common Criteria (ISO/IEC 15408) | Evaluation and certification of IT products against protection profiles | Yes, product certification |
| ISO 22316 | Principles and attributes of organisational resilience | No, it is about how a company withstands disruption |
Tip: ask whether the standard puts requirements on the thing being sold. 22316 doesn't.
Go deeper:
Information security standards (Wikipedia) — overview of the major product and organisational standards- Common Criteria (Wikipedia) — how product evaluation against protection profiles works