What is ISO/IEC 14651 about?
ISO/IEC 23643 is an International Standard on software and systems engineering. ISO/IEC 23643 specifies requirements for the vendors and gives guidelines for both the users and the developers of software safety and security verification tools. The users of such tools include, but are not limited to, bodies performing verification and software developers who need to be aware and pay attention to the safety and/or security of software.
ISO/IEC 23643 introduces use cases for software safety and security verification tools and entity-relationship model related to them.
Who is ISO/IEC 23643?
ISO/IEC 23643 on software safety and security verification tools is relevant to:
- IT industry
- Software engineers
- Developers
- Training and certification bodies
- System engineers
Why should you use ISO/IEC 23643?
Software engineering deals with designing and developing software of the highest quality, while systems engineering is the sub-discipline of engineering, which deals with the overall management of engineering projects during their life cycle.
ISO/IEC 23643 is useful as it guides the verification tool vendors to provide high-quality products that helps in process of developing, adding, and testing security features within applications to prevent security vulnerabilities against threats such as unauthorized access and modification.
ISO/IEC 23643 is beneficial as can ensure early identification and mitigation of security vulnerabilities. Moreover, reuse of security strategies and tools is helpful for software safety.