The Information and Communication Technology (ICT) Product Supply Chain Security Standards and Testing Specifications consist of four parts, namely(Click the attachment below to download):
*Security Standard for ICT Product Supply Chain Part 1: Chip Security
*Security Testing Specification for ICT Product Supply Chain Part 1: Chip Security
*Security Standard for ICT Product Supply Chain Part 2: System Software Security
*Security Testing Specification for ICT Product Supply Chain Part 2: System Software Security
We would like to express our gratitude to the Administration for Digital Industries of the Ministry of Digital Affairs, and the Department of Industrial Technology of Ministry of Economic Affairs for their guidance. The aforementioned industry standards and testing specifications were developed by the Information Security & Ecosystem Committee (iSEC Committee) of TEEMA, with technical editing provided by the Institute for Information Industry (III). After multiple expert meetings and consultations, revisions were consolidated and confirmed by the chairman and attending representatives of the Standards and Regulations Committee. Following the announcement for soliciting industry feedback according to the relevant industry standard formulation procedures, the standards were finalized on November 8, 2022 and became available for industry adoption.
The technical editing team includes:
Mr. Kao, Chuan-Kai, Deputy Director, Institute for Information Industry
Mr. Chong, Song-Kong, Researcher, Institute for Information Industry
Mr. Wang, Chin-Wei, Engineer, Institute for Information Industry
Ms. Chin, Yen-Chun, Planner, Institute for Information Industry
The participating corporations (in alphabetical order) in the formulation of these standards and specifications are:
Deloitte Taiwan
iSyncGroup Inc.
MediaTek Inc.
Mobile Application Security Alliance
National Cheng Kung University
National Chung Hsing University
National Chung-Shan Institute of Science and Technology
Nuvoton Technology Corporation
Onward Security
PUFsecurity Corporation
Quanta Cloud Technology
SGS Brightsight
Taiwan Association of Information and Communication Standard (TAICS)
Winbond Electronics Corporation