> For the complete documentation index, see [llms.txt](https://oasc.gitbook.io/oasc-mims-2024/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oasc.gitbook.io/oasc-mims-2024/mim6-securing-data.md).

# MIM6: Securing Data

OASC MIM6 and EU MIM6 Plus: Security Management

## Use Cases

TBD

## Description

As cities become smarter and more technology-driven, they become a target for cyber attacks with significant consequences in terms of costs and loss of services. In order to deliver reliable digital services for citizens, cities have to continuously evaluate the cyber risks and to put in place security measures to prepare for cyber attacks.

MIM 6 focuses on addressing interoperability for secure data transfer. 

## Objectives

* When information is transferred, between parts of the data platform or externally, this is done securely.
* Data processors know what requirements concerning security and interoperability to make of suppliers and systems when evaluating, procuring, developing, operating, and using solutions.

## Capabilities

(<mark style="color:orange;">see</mark> [Notes](/oasc-mims-2024/mim6-securing-data/notes.md) <mark style="color:orange;">for additional information</mark>)

**C1**: Data is only accessible to users that should have access to it.

**C2**: Data accessed by users has not been altered.

**C3**: Data accessed by users has not been altered and originates from a verified source.

## Requirements

TBD

## Mechanisms

TBD

## Specifications

(<mark style="color:orange;">see</mark> [Notes](/oasc-mims-2024/mim6-securing-data/notes.md) <mark style="color:orange;">for Specifications from an earlier version of this MIM. This list includes relevant Specifications for the current stage of development; more detailed information to be added in due course</mark>)

<table><thead><tr><th>Standard</th><th width="265">Description</th></tr></thead><tbody><tr><td><a href="https://www.iso.org/standard/27001">ISO 27001:2022</a></td><td>Information security, cybersecurity and privacy protection — Information security management systems — Requirements</td></tr><tr><td><a href="https://www.isa.org/standards-and-publications/isa-standards/isa-iec-62443-series-of-standards">IEC 62443</a></td><td>Requirements and processes for implementing and maintaining electronically secure industrial automation and control systems.</td></tr><tr><td><a href="https://digital-strategy.ec.europa.eu/en/policies/nis2-directive">NIS2</a></td><td>EU-wide legislation on cybersecurity. It provides legal measures to boost the overall level of cybersecurity in the EU.</td></tr></tbody></table>

## Interoperability Guidance

TBD

## Conformance and compliance testing

TBD