International standards series
IEC 62443 for the systems running your industrial sites
IEC 62443 is a series of international standards for protecting operational technology (OT), the systems that run factories, energy sites and other industrial processes. Separate parts apply to site owners, system builders and equipment suppliers.
- Type
- International standards series
- Focus
- Industrial automation and control systems
- Roles
- Owners, system builders, suppliers and service providers
- Certification
- Possible for some parts of the series
Who it applies to
Industrial owners, builders and suppliers
- Organisations operating industrial sites and the systems controlling physical processes.
- Companies building or connecting industrial systems for site owners.
- Equipment suppliers and service providers maintaining industrial control systems.
Different parts of the series cover different roles, systems and products. Site owners usually start with part 2-1, system builders with 2-4 and 3-3, equipment suppliers with 4-1 and 4-2, and maintenance providers with 2-4.
What it asks of you
Match safeguards to industrial operations
-
Map equipment and connections
Record sites, devices, software versions and links between the systems that operate your processes.
-
Assess consequences for the site
Consider what a security problem could do to operations and decide how much protection each part needs. The standard grades this in security levels, from 1 to 4.
-
Separate systems and restrict access
Group systems by their security needs and limit connections, including remote supplier access.
-
Plan maintenance and recovery
Set procedures for updates, changes, backups and incidents that account for production constraints.
-
Set supplier security responsibilities
Agree what equipment vendors, system builders and maintenance providers must protect and document.
How we help
Choose practical safeguards for your site
We map industrial systems and review the relevant standards for your role. We plan access restrictions, supplier checks and testing around your operational constraints.
Common questions
Common questions
Related regulations and standards
- Cyber Resilience Act
The EU law that sets security rules for hardware and software products sold in the EU, including equipment with software inside.
- NIS2
The EU cybersecurity law that can apply to medium and large energy and manufacturing companies. IEC 62443 gives those companies a detailed way to protect the systems that run their sites.
Free 30-minute call
Choose where to start with IEC 62443
Start with a free 30-minute call about your industrial sites, their security priorities and the standards that apply.
