[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iec-62443\u002F3-3":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iec-62443","3-3","62443-3-3","IEC 62443-3-3: System security requirements and security levels",215,"ISA and IEC","**What it asks for.** IEC 62443-3-3 defines technical security requirements for industrial automation and control systems at the system level. Requirements are grouped under seven foundational requirements: identification and authentication control, use control, system integrity, data confidentiality, restricted data flow, timely response to events and resource availability. Each is mapped to security levels that reflect the capability of the attacker the system should resist.\n\n**In practice.** Asset owners and integrators define a target security level for each zone and conduit, then select and verify system requirements and enhancements to meet it. Evidence includes zone and conduit models, target and achieved security level documentation, test results and gap analyses. Suppliers may obtain certification of systems against the standard.\n\n**Common gaps.** Target security levels are often set without a real risk assessment. Legacy components that cannot meet requirements are frequently left without documented compensating controls.",null,"https:\u002F\u002Fwww.isa.org\u002Fstandards-and-publications\u002Fisa-standards\u002Fisa-iec-62443-series-of-standards","Read about IEC 62443","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},208,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"ics-sniper-xworm-rce-and-ai-introduced-software-flaws-highlight-diverse-attack-surface","ICS-Sniper, XWorm RCE, and AI-Introduced Software Flaws Highlight Diverse Attack Surface","2026-10-16T16:20:31.539+00:00",{"slug":24,"title":25,"published_at":26},"multiple-critical-vulnerabilities-found-in-cisa-malcolm-network-traffic-analyzer","Multiple Critical Vulnerabilities Found in CISA Malcolm Network Traffic Analyzer","2026-10-15T18:22:08.348+00:00",{"slug":28,"title":29,"published_at":30},"eclipse-milo-vulnerabilities-enable-data-loss-impersonation-and-dos","Eclipse Milo Vulnerabilities Enable Data Loss, Impersonation, and DoS","2026-10-15T18:21:51.861+00:00",{"slug":32,"title":33,"published_at":34},"path-traversal-flaw-in-thermo-fisher-torrent-suite-exposes-sensitive-files","Path Traversal Flaw in Thermo Fisher Torrent Suite Exposes Sensitive Files","2026-10-15T18:21:22.798+00:00",{"slug":36,"title":37,"published_at":38},"ai-agents-can-compromise-ot-systems-and-move-physical-equipment-in-under-17-minutes","AI Agents Can Compromise OT Systems and Move Physical Equipment in Under 17 Minutes","2026-10-14T18:21:46.77+00:00",{"slug":40,"title":41,"published_at":42},"critical-ics-vulnerabilities-demand-urgent-patching-across-industrial-vendors","Critical ICS Vulnerabilities Demand Urgent Patching Across Industrial Vendors","2026-10-14T16:20:20.989+00:00",{"slug":44,"title":45,"published_at":46},"privilege-escalation-flaw-in-ignition-scada-software-demands-immediate-patching","Privilege Escalation Flaw in Ignition SCADA Software Demands Immediate Patching","2026-10-14T00:21:48.311+00:00",{"slug":48,"title":49,"published_at":50},"legacy-ot-refrigeration-controllers-exploited-across-french-supermarket-chain","Legacy OT Refrigeration Controllers Exploited Across French Supermarket Chain","2026-10-13T14:21:25.902+00:00",{"slug":52,"title":53,"published_at":54},"refrigeration-controller-vulnerabilities-enable-remote-supermarket-attacks","Refrigeration Controller Vulnerabilities Enable Remote Supermarket Attacks","2026-10-13T10:21:18.66+00:00",{"slug":56,"title":57,"published_at":58},"critical-flaws-in-grid-protection-alliance-software-enable-unauthenticated-rce","Critical Flaws in Grid Protection Alliance Software Enable Unauthenticated RCE","2026-10-08T18:21:30.364+00:00",{"slug":60,"title":61,"published_at":62},"hard-coded-credentials-and-missing-authentication-expose-industrial-switches-to-full-compromise","Hard-Coded Credentials and Missing Authentication Expose Industrial Switches to Full Compromise","2026-10-08T18:21:14.05+00:00",{"slug":64,"title":65,"published_at":66},"hard-coded-credentials-in-end-of-life-johnson-controls-easyio-fg-expose-full-unauthorized-access","Hard-Coded Credentials in End-of-Life Johnson Controls EasyIO FG Expose Full Unauthorized Access","2026-10-06T18:22:26.891+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",151,{"slug":74,"name":75,"problem":76,"stories":77},"patch-management","Automated patch management","Known holes get closed in days, not months.",146,{"slug":79,"name":80,"problem":81,"stories":82},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",104,{"slug":84,"name":85,"problem":86,"stories":87},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",72,{"slug":89,"name":90,"problem":91,"stories":92},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",23,{"slug":94,"name":95,"problem":96,"stories":97},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",18,[99,105,111,116,122,128,133,137],{"family":100,"item":101,"code":102,"title":103,"together":104},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",172,{"family":106,"item":107,"code":108,"title":109,"together":110},"cis","7","Control 7","Continuous Vulnerability Management",162,{"family":106,"item":112,"code":113,"title":114,"together":115},"12","Control 12","Network Infrastructure Management",156,{"family":117,"item":118,"code":119,"title":120,"together":121},"nist-800-53","si-2","SI-2","Flaw Remediation",111,{"family":123,"item":124,"code":125,"title":126,"together":127},"nerc-cip","cip-007","CIP-007-6","CIP-007: Systems Security Management",76,{"family":129,"item":130,"code":131,"title":131,"together":132},"itil","overview","ITIL",75,{"family":106,"item":134,"code":135,"title":136,"together":87},"4","Control 4","Secure Configuration of Enterprise Assets and Software",{"family":117,"item":138,"code":139,"title":140,"together":141},"ac-3","AC-3","Access Enforcement",49]