Cybersecurity Database

Standards · OT and cyber-physical systems (ICS/SCADA)

IEC 62443 Security for industrial automation and control systems

PublishedPaid ·

Official catalogue page

Standards are protected by copyright and almost always sold: here you find metadata, an original summary and a link to the official catalogue page where they can be consulted or bought. The text is not reproduced.

Summary

The IEC 62443 series is the international reference for the cybersecurity of industrial automation and control systems (IACS) and is used across OT sectors, from manufacturing to energy, water and transport. It organises requirements by role: asset owners (security programme, part 2-1), service providers and integrators (2-4), system designers (risk assessment, zones and conduits, security levels, parts 3-2 and 3-3) and component manufacturers (secure development lifecycle and technical requirements, parts 4-1 and 4-2). The part 6 specifications define the evaluation methods used for IECEE certification. It is developed jointly with the ISA99 committee, which also publishes it as ANSI/ISA-62443, and several parts are adopted as European standards EN IEC 62443.

Reference
IEC 62443
Official title
Security for industrial automation and control systems
Body
IEC / ISA – Technical committee: IEC TC 65/WG 10 · ISA99
Type
Series of standards
Status
Published
Published
Access to the text
Paid
Sectors
Equivalent adoptions
  • EN IEC 62443 (CENELEC, parti 2-1, 2-4, 3-2, 3-3, 4-1, 4-2)
  • ANSI/ISA-62443
Notes
The date shown is that of the most recently published part. According to the IEC catalogue (October 2026), part 1-1 is being developed as an International Standard (publication forecast for late 2027), part 6-1 likewise (forecast for September 2027), and new editions of parts 4-1 and 2-4 are in preparation (forecast for 2028); these dates are IEC estimates. Check the current edition in the IEC catalogue before buying.
Last verified
(verified via web)

Parts of the series

ReferenceOfficial titlePublished
IEC TS 62443-1-1:2009Terminology, concepts and models
IEC TS 62443-1-5:2023Scheme for IEC 62443 security profiles
IEC PAS 62443-1-6:2025Application of the 62443 series to the industrial internet of things (IIoT)
IEC 62443-2-1:2024Security program requirements for IACS asset owners
IEC PAS 62443-2-2:2025IACS security protection scheme
IEC TR 62443-2-3:2015Patch management in the IACS environment
IEC 62443-2-4:2023Security program requirements for IACS service providers
IEC TR 62443-3-1:2009Security technologies for industrial automation and control systems
IEC 62443-3-2:2020Security risk assessment for system design
IEC 62443-3-3:2013System security requirements and security levels
IEC 62443-4-1:2018Secure product development lifecycle requirements
IEC 62443-4-2:2019Technical security requirements for IACS components
IEC TS 62443-6-1:2024Security evaluation methodology for IEC 62443-2-4
IEC TS 62443-6-2:2025Security evaluation methodology for IEC 62443-4-2

Related laws and documents

Related standards

Metadata and summary: CC BY 4.0 · JSON

Report an error in this record