IEC 62443
What is IEC 62443?
Industrial Automation and Control Systems Security. It comprises 303 controls organised across 6 domains, and applies in International.
How IEC 62443 maps to other frameworks
All 303 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 6 domains IEC 62443 groups its controls into
Frameworks that share controls with IEC 62443
Each of these has at least one control mapped to a control in IEC 62443. The number is how many IEC 62443 controls are shared, counted from the mapping graph.
IEEE 1686
17 shared controlsNIST SP 1800-32
17 shared controlsISO 27019
17 shared controlsNIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security
15 shared controlsNIST SP 800-53 Rev 5
13 shared controlsSouth Korea ISMS-P
13 shared controlsNIST Privacy Framework
12 shared controlsNERC CIP
12 shared controlsImplementation guides for frameworks that overlap IEC 62443
Where IEC 62443 overlaps with the standards you already hold
Where to get trained on IEC 62443
4 courses in the catalogue cover IEC 62443 directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
Training more than one person? Ten seats of any course is $1,490 on a single licence, against $199 a seat bought one at a time.
What an auditor will ask you for
All 81 IEC 62443 controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.
Read the IEC 62443 evidence request listWhat IEC 62443 means in your sector
What IEC 62443 means for your job
Questions people ask about IEC 62443
What is IEC 62443?
How many controls does IEC 62443 have?
Where does IEC 62443 apply?
What frameworks does IEC 62443 map to?
How do I get started with IEC 62443 compliance?
Query IEC 62443 programmatically
IEC 62443, its 303 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
IEC 62443 API reference and MCP config →What IEC 62443 requires, control by control
Each page carries the requirement text for one IEC 62443 control and what an assessor expects to see as evidence.
- 62443-2-1-BCP Business Continuity and Disaster Recovery for IACS
- 62443-2-1-CSMS Cyber Security Management System (CSMS) for IACS
- 62443-2-1-IR Incident Planning and Response for IACS
- 62443-2-1-MOC Management of Change for IACS Security
- 62443-2-1-NSEG Network Segmentation and Zone/Conduit Implementation
- 62443-2-1-PHY Physical and Environmental Security of IACS Assets
- 62443-2-1-PM Patch Management and System Update for IACS
- 62443-2-4-SP-01 Service Provider Security Program
- 62443-2-4-SP-03 Service Provider Architecture and Design Practices
- 62443-2-4-SP-04 Service Provider Wireless and Remote Access Practices
How ready are you for IEC 62443?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.