[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iec-62443\u002F2-1":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iec-62443","2-1","62443-2-1","IEC 62443-2-1: Security program requirements for IACS asset owners",48,"ISA and IEC","**What it asks for.** IEC 62443-2-1 sets requirements for asset owners to establish, implement and maintain a security programme for their industrial automation and control systems. The current edition is organised into security programme elements that cover areas such as organisational security policy, configuration management, network and communications security, component security, user access control, event and incident management, and system integrity and availability.\n\n**In practice.** Asset owners define governance and responsibilities for operational technology security, assess risk, apply policies and procedures to their control systems and measure the programme's maturity. Evidence includes OT security policies, risk assessments, asset inventories, access control records, incident procedures and maturity self-assessments.\n\n**Common gaps.** OT security is often run as an extension of IT policy without accounting for safety and availability constraints. Asset inventories of control systems are frequently incomplete.",null,"https:\u002F\u002Fwww.isa.org\u002Fstandards-and-publications\u002Fisa-standards\u002Fisa-iec-62443-series-of-standards","Read about IEC 62443","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"end-of-life-ot-devices-enable-supermarket-refrigeration-cyberattack","End-of-Life OT Devices Enable Supermarket Refrigeration Cyberattack","2026-10-15T14:20:22.449+00:00",{"slug":23,"title":24,"published_at":25},"ivanti-ics-zero-day-exposes-vendor-patching-gaps-in-critical-infrastructure","Ivanti ICS Zero-Day Exposes Vendor Patching Gaps in Critical Infrastructure","2026-10-14T22:20:35.194+00:00",{"slug":27,"title":28,"published_at":29},"critical-ics-vulnerabilities-demand-urgent-patching-across-industrial-vendors","Critical ICS Vulnerabilities Demand Urgent Patching Across Industrial Vendors","2026-10-14T16:20:20.989+00:00",{"slug":31,"title":32,"published_at":33},"hitachi-energy-soi-rce-flaw-exposes-critical-infrastructure-via-outdated-apache-activemq","Hitachi Energy SOI RCE Flaw Exposes Critical Infrastructure via Outdated Apache ActiveMQ","2026-10-06T18:22:47.029+00:00",{"slug":35,"title":36,"published_at":37},"hitachi-energy-reb500-vulnerable-to-dos-via-unpatched-third-party-library","Hitachi Energy REB500 Vulnerable to DoS via Unpatched Third-Party Library","2026-10-06T18:21:42.056+00:00",{"slug":39,"title":40,"published_at":41},"unpatched-realtek-sdk-flaw-fuels-cling-botnet-with-stealthy-stun-based-c2","Unpatched Realtek SDK Flaw Fuels Cling Botnet With Stealthy STUN-Based C2","2026-10-05T14:21:43.456+00:00",{"slug":43,"title":44,"published_at":45},"johnson-controls-easyio-neo-controllers-expose-sensitive-data-via-unpatched-firmware","Johnson Controls EasyIO Neo Controllers Expose Sensitive Data via Unpatched Firmware","2026-10-01T19:20:39.364+00:00",{"slug":47,"title":48,"published_at":49},"abb-pcm600-flaws-enable-privilege-escalation-and-file-overwrite-in-energy-infrastructure","ABB PCM600 Flaws Enable Privilege Escalation and File Overwrite in Energy Infrastructure","2026-10-01T18:22:36.813+00:00",{"slug":51,"title":52,"published_at":53},"unpatched-anjvision-camera-firmware-leaves-devices-fully-exposed","Unpatched Anjvision Camera Firmware Leaves Devices Fully Exposed","2026-09-29T19:20:39.532+00:00",{"slug":55,"title":56,"published_at":57},"unpatched-baicells-enodeb-devices-open-to-unauthenticated-dos-attacks","Unpatched Baicells eNodeB Devices Open to Unauthenticated DoS Attacks","2026-09-29T18:22:35.59+00:00",{"slug":59,"title":60,"published_at":61},"ai-tools-excessive-third-party-access-and-banking-trojans-highlight-this-weeks-threat-landscape","AI Tools, Excessive Third-Party Access, and Banking Trojans Highlight This Week's Threat Landscape","2026-09-24T20:21:18.301+00:00",{"slug":63,"title":64,"published_at":65},"third-party-ics-integrator-access-enables-foreign-actor-breach-of-industrial-data","Third-Party ICS Integrator Access Enables Foreign Actor Breach of Industrial Data","2026-09-24T12:20:23.969+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"patch-management","Automated patch management","Known holes get closed in days, not months.",38,{"slug":73,"name":74,"problem":75,"stories":76},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",36,{"slug":78,"name":79,"problem":80,"stories":81},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",18,{"slug":83,"name":84,"problem":85,"stories":86},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",15,{"slug":88,"name":89,"problem":90,"stories":91},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",9,{"slug":93,"name":94,"problem":95,"stories":96},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",6,[98,104,109,114,119,124,129,135],{"family":99,"item":100,"code":101,"title":102,"together":103},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",42,{"family":105,"item":106,"code":107,"title":108,"together":103},"cis","7","Control 7","Continuous Vulnerability Management",{"family":105,"item":110,"code":111,"title":112,"together":113},"12","Control 12","Network Infrastructure Management",33,{"family":115,"item":116,"code":117,"title":118,"together":113},"nist-800-53","si-2","SI-2","Flaw Remediation",{"family":120,"item":121,"code":122,"title":122,"together":123},"itil","overview","ITIL",25,{"family":105,"item":125,"code":126,"title":127,"together":128},"2","Control 2","Inventory and Control of Software Assets",22,{"family":130,"item":131,"code":132,"title":133,"together":134},"nerc-cip","cip-007","CIP-007-6","CIP-007: Systems Security Management",19,{"family":136,"item":137,"code":138,"title":139,"together":140},"nist-csf","id-am","ID.AM-2","Asset Management",16]