IEC 62443
What is IEC 62443?
An international series of standards for industrial automation and control system cybersecurity, covering operator, integrator, and component manufacturer requirements.
Terms that appear alongside iec 62443
Each of these is named in at least one of the same controls as iec 62443. The number is how many controls name both.
- nist 24 shared controls
- cybersecurity 16 shared controls
- authentication 14 shared controls
- audit 11 shared controls
- integrity 11 shared controls
- governance 10 shared controls
- network segmentation 9 shared controls
- policy 9 shared controls
Frameworks that govern iec 62443
What the standards actually require on iec 62443
Requirements naming iec 62443 across 6 standards, quoted from the control text.
A process tells users whether the product is compatible with security updates to dependent components or operating systems, and how to manage the risk of not applying them.
iacs-unified-requirements-e26e27-cyber-resilience-of-ships-and-on-board-systems::E27-5.3 · E27 5.3 Dependent component security update documentation (IEC 62443-4-1 SUM-3) →NSS-17 + NSS-42-G require comprehensive access control aligned with CSL: unique user identification + no shared accounts where feasible (emergency shared accounts logged + reviewed);
IAEA-NSS17-AccessControl-OT-IT-Authentication-Authorization · IAEA NSS-17 - Access Control + Authentication + Authorization + IAM + Privileged Access for OT and IT →Establish an Operational Technology (OT) security program per NIST SP 800-82 Rev 3 Chapter 3 (OT Cybersecurity Program Development) and Chapter 4 (Risk Management).
NISTSP82-1 · OT Security Program Governance, Policy, Roles, and Safety-Security Integration →Technical controls should be practical, cost-effective and kept current, drawing on the CIS Critical Security Controls. Covered are: limiting network ports, protocols and services to business need with managed routers;
BIMCO-7.2 · Technical protection measures →The effect of physical security and IT security threats on functional safety is considered: the safety case identifies the security threats that could cause a hazardous failure of a safety-related function, shows that the system design and its application cond...
en-50126-en-50128-en-50129-railway-applications-rams::50129:6.4 · Physical security and IT-security →Article 29 establishes the COMMON ELECTRICITY CYBERSECURITY FRAMEWORK - a sector-specific set of cybersecurity controls building on horizontal frameworks (NIS2 Article 21(2) + ISO/IEC 27001 + IEC 62443) but adapted to the electricity sector + cross-border flow...
NCCS-Art.29_30_31 · Common electricity cybersecurity framework and minimum cybersecurity controls (NCCS Articles 29-31) - for high-impact entities →Questions people ask about iec 62443
What is IEC 62443?
Why is IEC 62443 important for compliance?
Which compliance frameworks address IEC 62443?
Where can I learn more about IEC 62443?
See how IEC 62443 applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.