IEC 62443, developed by ISA and published by the IEC, is the reference for securing plants, utilities and other operational technology. Its parts address policies and procedures for asset owners, system design and risk assessment for integrators, and secure development and technical requirements for component suppliers. Central concepts include dividing a system into zones and conduits, which is network segmentation with defined trust boundaries, and assigning each zone a target security level according to the capability of the attacker it must resist.
For industrial IoT vendors, certification of a product against the component parts is increasingly a purchasing requirement, and regulators and buyers commonly refer to the series when assessing industrial products. Industrial IoT: a practical guide covers where it fits in a project.
Part of the IoT Glossary. Spotted an error or a missing term? Tell us.