IEC 62443

IEC 62443 is the international series of standards for cybersecurity of industrial automation and control systems, covering the asset owner, the system integrator, and the product supplier.

It organizes a plant into security zones joined by conduits, assigns each zone a target security level, and sets requirements for the system and its components to meet that level. Part 4-1 governs the supplier’s secure development lifecycle and part 4-2 the security capabilities of a component such as an energy management system. Utilities and large asset owners increasingly ask storage controls vendors for IEC 62443 evidence.

Also called: ISA/IEC 62443, ISA 99