The International Electrotechnical Commission has published IEC 62443-4-2:2019, which sets technical security requirements for components of industrial automation and control systems (IACS).
Key points
- Covers embedded devices, network components, host devices and software applications.
- Requirements are grouped under seven foundational requirements, including identification and authentication, system integrity and data confidentiality.
- Defines capability security levels for components.
- Complements IEC 62443-4-1 on secure product development lifecycles.
- Supports certification of OT products.
Operators of critical infrastructure increasingly require IEC 62443 certified products. UK OT manufacturers and integrators should use the standard to demonstrate product security to customers and regulators.
Source: IEC 62443-4-2:2019 (IEC Webstore)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
