We use cookies on our website to personalize content and ads, to provide social media features and to analyze traffic to our website. To provide you with a convenient online experience and to improve our communications, please click "ACCEPT ALL". By doing so, you consent to the processing and sharing of your information with our social media, advertising and analytics partners. You can revoke your consent at any time in the settings.
Data protection declaration | Legal notices
Setting

OT Security Standard IEC 62443

The Scope of IEC 62443 Standard
ISA/IEC 62443 has different series of standards. In addition to enabling upstream, midstream, and downstream manufacturers in various industrial control fields to have their own corresponding standards, when the standard is updated in the future, the certification only needs to be updated by certain organizations, instead of applying it to all manufacturers. For manufacturers, it can diversify information security risks, reduce the cost and manpower of implementing security standards, and can also be used when cybersecurity incidents occur, quickly find out the cause, and take appropriate measures.
Why ISA/IEC 62443
Cyber Security in Industrial Automation and Control (IACS)
  • It the system design is not secure enough and can not be solved by technical means, then appropriate management and procedures are required.
  • It the system design is not secure enough and can not be solved by technical means, then appropriate management and procedures are required.
  • Human is always the biggest problem in cyber security management.
  • The attack technologies are becoming more and more complex, and the attack sources are quite extensive.
  • Public and private networks are interconnected to share information, making access control more difficult.
  • The decentralized computer operation weakens the effect of centralized management.
Implementation Timeline
The methodology of International Standard IEC 62443-4-1 is adopted to assist in the establishment of the secure product development plan
  • Differentiation Analysis
    • Feasibility evaluation of cyber security operation
    • Product security test (Pretest)
  • IEC 62443 4-1 Implementation
    • Status interview
    • Organization establishment and policy formulation
    • Plan security workflow of product development
  • IEC 62443 4-2 Testing
    • Cyber security test training
    • Compliance testing
IEC 62443-4-2 Technical Security Requirements for IACS Components
IEC 62443-4-2 Technical Security Requirements for IACS Components
  • IAC - Identification and Authentication Control
  • RA - Resource Availability
  • TRE - Timely Response to Event
  • RDF - Restricted Data Flow
  • DC - Data Confidentiality
  • SI - System Integrity
  • UC - User Control
Component Requirement (CR)
  • Software Application Requirement (SAR)
  • Embedded Device Requirement (EDR)
  • Host Device Requirement (HDR)
  • Network Device Requirement (NDR)
Contact us