Short series: ISA/IEC 62443
Although we commonly think of the ISA/IEC 62443 series of standards as our leading guidance for industrial cybersecurity, it is actually a very horizontal standard which is technology-independent and can be applied across a number of applications. We are seeing references to the series of standards in regulations and directives like the EU Machinery Directive, Radio Equipment Directive (RED) and the EU Cyber Resilience Act.
Transcript (auto-generated)
Jody Nelson with SRES Shorts. Now I’d like to discuss a little bit about the ISA IEC 62443 series of standards. Now this has a focus in both the system level and component levels regarding cybersecurity but also talks about and defines the policies and procedures that we need to create an appropriate industrial control systems or ICS cybersecurity management. Now in addition to this, it does introduce ideas like operational life cycle.
This is something that we commonly see in our functional safety standards as well. So it has a very broad audience from asset owners to product manufacturers to operators themselves. So although we commonly refer to this as our leading guidance for industrial cybersecurity, it’s not just for industrial applications. It is very horizontal or a base standard in cybersecurity which is technology independent so it can be applied across a number of different applications so expands beyond just industrial IOT. Now why is that important? Well we’re already seeing a number of regulations that reference 62443 for example the EU machinery directive, the radio equipment directive, the RED directive and the EU Cyber Resilience Act. Now outside of the EU we also see collaborations in the US with NEMA, with the US Department of Energy. So there’s many other nations also looking into 62443 as a reference guidance for cybersecurity.
