Industrial Cybersecurity Standards
IACS security standards for networked industrial automation and control systems. IEC 62443 is the primary international series.
Quick Routing
Networked PLC or controller? → IEC 62443-3-3 (Zone/Conduit + SL design)
Asset Owner — need a security program? → IEC 62443-2-1 (CSMS)
Buying or certifying a product? → IEC 62443-4-2 (component requirements)
Developing safety PLC software? → IEC 62443-4-1 (secure development lifecycle)
Safety system with network interface? → IEC 62443 + IEC 61511 (or IEC 62061)
IEC 62443 Series
| Standard | Scope | Status |
|---|---|---|
| IEC 62443 (full page) | IACS security — Zone/Conduit, Security Levels, FRs, lifecycle | Review pending |
| IEC 62443-2-1 | Security management system (CSMS) | Covered in IEC 62443 page |
| IEC 62443-3-3 | System security requirements and SL levels | Covered in IEC 62443 page |
| IEC 62443-4-1 | Secure product development lifecycle | Covered in IEC 62443 page |
| IEC 62443-4-2 | Component security requirements | Covered in IEC 62443 page |
Relationship to Functional Safety
Cybersecurity and functional safety are separate but interdependent disciplines for networked safety systems:
- IEC 61511:2016 requires a cybersecurity risk assessment for safety instrumented systems.
- IEC 62061 does not explicitly mandate a cybersecurity assessment but the principle that a safety function must not be defeated by a foreseeable means applies.
- A successful cyberattack on a safety system is a safety hazard — the cybersecurity Zone/Conduit design must protect the safety function as well as the system.
| See also | Link |
|---|---|
| Networked Safety PLC scenario | Scenario 04 |
| Software Stack and routing guide | Software Stack |
| Functional safety family | Functional Safety |
Out-of-Scope for This Corpus
| Topic | Status |
|---|---|
| IEC 60079 (hazardous area) | Covered separately — see Hazardous Area |
| NIST SP 800-82 (US OT security guide) | Out of scope for this corpus |
| NERC CIP (electric utility cybersecurity) | Out of scope for this corpus |
| ISA/IEC 62443 certification schemes | Out of scope for this corpus — verify against ISASecure and TÜV certification bodies |
This site is an independent educational reference for industrial automation standards. It paraphrases and organizes guidance in original language; it is not a substitute for the official published standards, professional engineering judgment, or legal review, and content has not been independently verified against current published editions.
Items marked Review pending await technical review against the identified edition. Items marked Planned have no reviewed source material behind them. Do not rely on this site for compliance determinations, safety-critical design decisions, or legal interpretation.