Skip to main content

Clause 7.4 — Cybersecurity architecture and design

Subclause 7.4 specifies requirements for product cybersecurity architecture and design under FprEN 40000-1-2:2026. Design decisions select controls that fulfill specified security requirements.

What Clause 7.4 requires​

Requirements​

  • [CLA-03-RQ-01]: Cybersecurity architecture and design shall be specified, including selection of appropriate cybersecurity controls to fulfill requirements (7.3). Considers security by design (5.3) and secure by default (5.4).
  • [CLA-03-RQ-02]: Cybersecurity architecture and design shall ensure product security is maintained during component integration, including third-party components and RDPS.

Design artifacts include:

  • Secure-by-default settings of components.
  • Internal and external interface protection definitions.
  • Data-flow and trust-boundary diagrams (highlighting RDPS boundaries).
  • Separation mechanisms for functional versus security updates.

Outputs & Assessment​

  • Output: Documented cybersecurity architecture and design specification.
  • Assessment Criteria: PASS assigned when architecture documentation exists, meets requirement criteria, and aligns with specified cybersecurity requirements.

How CVD Portal supports compliance​

CVD Portal provides structured artifact repositories for architectural evidence:

  • Technical file artifact store: You can upload and store architecture diagrams, interface protection specs, and trust boundary documentation.
  • RDPS tracking: The platform records each remote data processing solution. For each one, it records the operator, the data exchanged, trust and authentication, and degraded modes.
  • Data-flow diagram: The workspace generates a data-flow diagram with trust boundaries from the product assets. The technical file export includes the diagram.
  • Standards applied: You select the standards you applied (for example ETSI EN 303 645 or IEC 62443-4-2) from a fixed list.