IEC 62443
Risk assessment (3-2), system requirements (3-3), integrators (2-4) and manufacturers (4-1 and 4-2): we support you in applying the series of standards for automation system security.
What the service includes
The IEC 62443 series addresses different roles: those who operate the plant, those who integrate it and those who build the components. Each has dedicated parts of the standard.
- Risk assessment (3-2). Partitioning of the system into zones and conduits, risk analysis and definition of target security levels (SL-T).
- System requirements (3-3). Verification of technical requirements against security levels and identification of gaps (SL-A versus SL-T).
- Integrators and service providers (2-4). Security requirements for those who install, integrate and maintain automation systems.
- Manufacturers (4-1 and 4-2). Secure product development lifecycle and technical requirements for components.
- Security programme. Policies, roles and processes to manage plant security over time.
How we work
The same four-phase method we apply to every project, adapted to this area.
01
Assess
Definition of the system under consideration, asset inventory and initial risk assessment.
02
Design
Zones, conduits and target security levels, with a prioritised mitigation plan.
03
Implement
Application of technical and organisational countermeasures, with supporting documentation.
04
Operate
Periodic review, change management and updating of the risk assessment.
References
- IEC 62443-3-2 – Risk assessment and system design
- IEC 62443-3-3 – System requirements and security levels
- IEC 62443-2-4 – Requirements for service providers
- IEC 62443-4-1 and 4-2 – Secure development and component requirements
Learn more
Want to start from IEC 62443?
Tell us about your situation: we will reply with a concrete proposal. You can also call us on 800 035 430.