Get audit-ready for IEC 62443
IEC 62443 · Industrial Automation and Control Systems Security
Series of standards addressing cybersecurity for industrial automation and control systems (IACS), providing a framework for securing operational technology environments.
IEC 62443What is IEC 62443?
Series of standards addressing cybersecurity for industrial automation and control systems (IACS), providing a framework for securing operational technology environments.
Who it applies to
Industrial and operational technology environments — manufacturing plant, utilities, process control — and the vendors supplying components into them. The concerns are availability and safety first, which is what separates it from IT security standards.
How the standard is organised
A multi-part series addressing different audiences separately: asset owners, system integrators and product suppliers, organised around zones, conduits and security levels.
Framework names, marks and abbreviations (ISO, SOC 2, PCI DSS, TISAX, HIPAA, GDPR and others) are trademarks of their respective standards bodies and are used here only to describe what the Bitkosh Readiness Platform helps you track and prepare for. The badges shown are original Bitkosh artwork, not the official marks. Bitkosh Technologies is not affiliated with, sponsored by, or endorsed by ISO, AICPA, the PCI Security Standards Council, ENX/VDA, or any other framework owner, and using this platform does not by itself confer or guarantee certification — certification/attestation is granted only by the relevant accredited third-party body.
IEC 62443 on the Bitkosh platform
The 66 IEC 62443 controls sit in one workspace with gap assessment, evidence collection and your readiness score, and shared controls count towards the equivalent requirement in the other 47 ready frameworks at the same time — so a second framework costs a fraction of the first.
How the platform worksSample controls
Six controls from the platform's control library, chosen because they are the most specific to this framework.
- SL-TTarget security level per zone
Each zone and conduit has a documented target security level based on risk assessment, and capability and achieved levels are compared against it.
Security Level Targeting - SR 1.11Unsuccessful login attempts
Repeated failed logins trigger a lockout or delay so guessing attacks are limited, balanced against the need for operators to keep access in emergencies.
FR1 Identification and Authentication Control - SR 3.6Deterministic output
Outputs move to a predefined safe state if the system loses power or fails, so outcomes remain predictable.
FR3 System Integrity - SR 2.8Auditable events
Security-relevant events such as access control, request errors and configuration changes are defined and recorded in audit logs.
FR2 Use Control - SR 2.11Timestamps
Audit records carry reliable time information synchronised to an authoritative source so events can be correlated.
FR2 Use Control - SR 5.2Zone boundary protection
Traffic across zone boundaries is limited to what is needed, with deny-by-default rules and a way to isolate a zone in an emergency.
FR5 Restricted Data Flow
More information security & cybersecurity frameworks
Frequently Asked Questions
Who publishes IEC 62443, and who does it apply to?
How is IEC 62443 conformance demonstrated?
How is IEC 62443 structured?
Ready to get audit-ready for IEC 62443?
See how the Bitkosh Readiness Platform gets you audit-ready for IEC 62443 — and the other 47 ready frameworks — from a single control library.