[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iec-62443\u002F2-4":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iec-62443","2-4","62443-2-4","IEC 62443-2-4: Security program requirements for IACS service providers",16,"ISA and IEC","**What it asks for.** IEC 62443-2-4 sets requirements for the security capabilities of service providers, such as integrators and maintenance providers, that work on industrial automation and control systems for asset owners. It covers areas such as solution staffing, architecture, wireless, safety instrumented systems, configuration management, remote access, event management, account management, malware protection and patch management.\n\n**In practice.** Asset owners use the standard to specify what they expect from integrators and maintenance providers in contracts, and service providers use it to structure their own processes and to demonstrate capability, sometimes through certification. Evidence includes contract requirements, service provider procedures, staff training records and records of how remote access and changes are handled.\n\n**Common gaps.** Contracts often reference the standard without specifying which requirements apply. Remote maintenance access by service providers is frequently weaker than agreed.",null,"https:\u002F\u002Fwww.isa.org\u002Fstandards-and-publications\u002Fisa-standards\u002Fisa-iec-62443-series-of-standards","Read about IEC 62443","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"end-of-life-rtu500-firmware-exposes-critical-infrastructure-to-high-severity-vulnerabilities","End-of-Life RTU500 Firmware Exposes Critical Infrastructure to High-Severity Vulnerabilities","2026-10-06T18:22:11.807+00:00",{"slug":23,"title":24,"published_at":25},"critical-stack-buffer-overflow-in-netstax-ethernetip-stack-enables-silent-remote-code-execution","Critical Stack Buffer Overflow in NetStaX EtherNet\u002FIP Stack Enables Silent Remote Code Execution","2026-09-03T19:20:24.352+00:00",{"slug":27,"title":28,"published_at":29},"critical-vulnerabilities-in-ase2000-v2-test-set-expose-ics-networks-to-file-network-and-mitm-attacks","Critical Vulnerabilities in ASE2000 V2 Test Set Expose ICS Networks to File, Network, and MITM Attacks","2026-08-27T18:23:00.075+00:00",{"slug":31,"title":32,"published_at":33},"outdated-mongodb-in-abb-zenon-iiot-exposes-industrial-systems-to-critical-vulnerabilities","Outdated MongoDB in ABB Zenon IIoT Exposes Industrial Systems to Critical Vulnerabilities","2026-08-06T18:21:43.421+00:00",{"slug":35,"title":36,"published_at":37},"radiant-dicom-viewer-flaw-enables-remote-code-execution-via-malicious-files","RadiAnt DICOM Viewer Flaw Enables Remote Code Execution via Malicious Files","2026-08-06T18:21:13.094+00:00",{"slug":39,"title":40,"published_at":41},"rockwell-automation-ics-denial-of-service-flaw-threatens-industrial-operations","Rockwell Automation ICS Denial-of-Service Flaw Threatens Industrial Operations","2026-07-30T19:21:32.908+00:00",{"slug":43,"title":44,"published_at":45},"critical-heap-out-of-bounds-vulnerabilities-found-in-iec-61850-library-used-in-energy-infrastructure","Critical Heap Out-of-Bounds Vulnerabilities Found in IEC 61850 Library Used in Energy Infrastructure","2026-07-30T18:22:05.173+00:00",{"slug":47,"title":48,"published_at":49},"siemens-cadra-exposes-critical-ics-vulnerabilities-via-bundled-third-party-libraries","Siemens CADRA Exposes Critical ICS Vulnerabilities via Bundled Third-Party Libraries","2026-07-21T19:21:43.513+00:00",{"slug":51,"title":52,"published_at":53},"siemens-smartplug-devices-exposed-by-unpatched-opensslopenssh-flaws","Siemens SmartPlug Devices Exposed by Unpatched OpenSSL\u002FOpenSSH Flaws","2026-07-21T19:20:55.981+00:00",{"slug":55,"title":56,"published_at":57},"rockwell-automation-ics-modules-vulnerable-to-dos-via-malformed-cip-packets","Rockwell Automation ICS Modules Vulnerable to DoS via Malformed CIP Packets","2026-07-16T19:21:10.897+00:00",{"slug":59,"title":60,"published_at":61},"critical-buffer-overflow-flaws-in-rockwell-plcs-enable-remote-denial-of-service","Critical Buffer Overflow Flaws in Rockwell PLCs Enable Remote Denial-of-Service","2026-07-16T18:21:18.447+00:00",{"slug":63,"title":64,"published_at":65},"u-boot-bootloader-flaws-enable-pre-os-firmware-compromise","U-Boot Bootloader Flaws Enable Pre-OS Firmware Compromise","2026-07-10T22:20:24.278+00:00",[67,71,76,81,86,91],{"slug":68,"name":69,"problem":70,"stories":9},"patch-management","Automated patch management","Known holes get closed in days, not months.",{"slug":72,"name":73,"problem":74,"stories":75},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",12,{"slug":77,"name":78,"problem":79,"stories":80},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",8,{"slug":82,"name":83,"problem":84,"stories":85},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",7,{"slug":87,"name":88,"problem":89,"stories":90},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",2,{"slug":92,"name":93,"problem":94,"stories":95},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",1,[97,102,108,114,118,123,127,132],{"family":98,"item":99,"code":100,"title":101,"together":9},"cis","7","Control 7","Continuous Vulnerability Management",{"family":103,"item":104,"code":105,"title":106,"together":107},"nist-800-53","si-2","SI-2","Flaw Remediation",15,{"family":109,"item":110,"code":111,"title":112,"together":113},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",13,{"family":98,"item":115,"code":116,"title":117,"together":113},"2","Control 2","Inventory and Control of Software Assets",{"family":98,"item":119,"code":120,"title":121,"together":122},"12","Control 12","Network Infrastructure Management",10,{"family":124,"item":125,"code":126,"title":126,"together":80},"itil","overview","ITIL",{"family":128,"item":129,"code":130,"title":131,"together":80},"nist-csf","id-am","ID.AM-2","Asset Management",{"family":103,"item":133,"code":134,"title":135,"together":136},"sa-12","SA-12","Supply Chain Protection",6]