[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iec-62443\u002F4-2":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iec-62443","4-2","62443-4-2","IEC 62443-4-2: Technical security requirements for IACS components",17,"ISA and IEC","**What it asks for.** IEC 62443-4-2 defines technical security requirements for individual components of industrial automation and control systems, such as embedded devices, network devices, host devices and software applications. Requirements are derived from the same foundational requirements as IEC 62443-3-3 and are mapped to security levels, describing the security capabilities a component must provide.\n\n**In practice.** Product suppliers design components to meet the requirements for their target security level and often seek certification. Asset owners and integrators use the standard to specify component requirements in procurement and to check that components support the system level design. Evidence includes supplier declarations or certificates, product security documentation and test reports.\n\n**Common gaps.** Certification claims are sometimes accepted without checking which security level and which configuration were assessed. Security capabilities may exist but remain disabled in deployment.",null,"https:\u002F\u002Fwww.isa.org\u002Fstandards-and-publications\u002Fisa-standards\u002Fisa-iec-62443-series-of-standards","Read about IEC 62443","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"hard-coded-credentials-in-eseecloud-ip-cameras-leave-users-exposed","Hard-Coded Credentials in EseeCloud IP Cameras Leave Users Exposed","2026-10-15T18:21:38.566+00:00",{"slug":23,"title":24,"published_at":25},"hard-coded-credentials-and-missing-authentication-expose-industrial-switches-to-full-compromise","Hard-Coded Credentials and Missing Authentication Expose Industrial Switches to Full Compromise","2026-10-08T18:21:14.05+00:00",{"slug":27,"title":28,"published_at":29},"hard-coded-credentials-and-cleartext-transmission-expose-eld-telemetry-data","Hard-Coded Credentials and Cleartext Transmission Expose ELD Telemetry Data","2026-09-17T18:23:21.435+00:00",{"slug":31,"title":32,"published_at":33},"hard-coded-cryptographic-keys-expose-wrtsil-marine-software-to-remote-code-execution","Hard-Coded Cryptographic Keys Expose Wärtsilä Marine Software to Remote Code Execution","2026-09-15T17:21:26.741+00:00",{"slug":35,"title":36,"published_at":37},"hard-coded-credentials-and-missing-auth-expose-dvrnvr-surveillance-systems","Hard-Coded Credentials and Missing Auth Expose DVR\u002FNVR Surveillance Systems","2026-09-15T17:20:47.394+00:00",{"slug":39,"title":40,"published_at":41},"hard-coded-credentials-in-carecam-pro-ip-cameras-enable-full-device-compromise","Hard-Coded Credentials in CareCam Pro IP Cameras Enable Full Device Compromise","2026-09-08T18:22:23.108+00:00",{"slug":43,"title":44,"published_at":45},"hard-coded-credentials-in-medical-brain-stimulation-device-enable-bluetooth-auth-bypass","Hard-Coded Credentials in Medical Brain Stimulation Device Enable Bluetooth Auth Bypass","2026-08-13T19:21:36.644+00:00",{"slug":47,"title":48,"published_at":49},"unauthenticated-ble-commands-allow-attackers-to-hijack-medical-stimulator","Unauthenticated BLE Commands Allow Attackers to Hijack Medical Stimulator","2026-08-11T18:21:56.452+00:00",{"slug":51,"title":52,"published_at":53},"hardcoded-bluetooth-key-exposes-automotive-anti-theft-systems-to-remote-attack","Hardcoded Bluetooth Key Exposes Automotive Anti-Theft Systems to Remote Attack","2026-08-04T16:22:50.484+00:00",{"slug":55,"title":56,"published_at":57},"unauthenticated-debug-interface-exposes-critical-ics-devices-to-root-level-takeover","Unauthenticated Debug Interface Exposes Critical ICS Devices to Root-Level Takeover","2026-07-30T19:21:01.086+00:00",{"slug":59,"title":60,"published_at":61},"hard-coded-cryptographic-keys-leave-critical-infrastructure-controllers-fully-exposed","Hard-Coded Cryptographic Keys Leave Critical Infrastructure Controllers Fully Exposed","2026-07-30T19:20:43.882+00:00",{"slug":63,"title":64,"published_at":65},"siemens-sicam-8-flaws-expose-critical-infrastructure-to-firmware-attacks-and-privilege-escalation","Siemens SICAM 8 Flaws Expose Critical Infrastructure to Firmware Attacks and Privilege Escalation","2026-07-16T18:21:53.779+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",15,{"slug":73,"name":74,"problem":75,"stories":76},"patch-management","Automated patch management","Known holes get closed in days, not months.",12,{"slug":78,"name":79,"problem":80,"stories":81},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",8,{"slug":83,"name":84,"problem":85,"stories":86},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",7,{"slug":88,"name":89,"problem":90,"stories":91},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",3,{"slug":93,"name":94,"problem":95,"stories":91},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[97,102,107,113,119,124,128,133],{"family":98,"item":99,"code":100,"title":101,"together":71},"cis","7","Control 7","Continuous Vulnerability Management",{"family":98,"item":103,"code":104,"title":105,"together":106},"4","Control 4","Secure Configuration of Enterprise Assets and Software",14,{"family":108,"item":109,"code":110,"title":111,"together":112},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",10,{"family":114,"item":115,"code":116,"title":117,"together":118},"nist-800-53","ia-5","IA-5","Authenticator Management",9,{"family":120,"item":121,"code":122,"title":123,"together":118},"gdpr","32","Article 32","Security of processing",{"family":98,"item":125,"code":126,"title":127,"together":118},"12","Control 12","Network Infrastructure Management",{"family":114,"item":129,"code":130,"title":131,"together":132},"si-2","SI-2","Flaw Remediation",6,{"family":114,"item":134,"code":135,"title":136,"together":137},"ac-2","AC-2","Account Management",5]