[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iec-62443\u002Foverview":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iec-62443","overview","62443","IEC 62443 series",69,"ISA and IEC","**What it covers.** IEC 62443 is a series of international standards for the security of industrial automation and control systems. It covers general concepts, policies and procedures for asset owners and service providers, system level requirements and component level requirements, including secure product development. Core ideas include zones and conduits, security levels and shared responsibility among asset owners, integrators and product suppliers.\n\n**In practice.** Asset owners run a security programme for their operational technology, segment systems into zones and conduits, set target security levels based on risk and require suppliers and integrators to meet the relevant parts. Evidence includes risk assessments, zone models, security level documentation, supplier certifications and maintenance procedures. The series is often referenced alongside NIS2 for operators of essential services.\n\n**Common gaps.** Organisations sometimes adopt the vocabulary without the risk assessment behind it. Responsibilities between owner, integrator and supplier are often unclear in contracts.",null,"https:\u002F\u002Fwww.isa.org\u002Fstandards-and-publications\u002Fisa-standards\u002Fisa-iec-62443-series-of-standards","Read about IEC 62443","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"ai-compromises-robotic-arm-in-16-minutes-exposing-ot-security-gaps","AI Compromises Robotic Arm in 16 Minutes, Exposing OT Security Gaps","2026-10-16T20:20:16.394+00:00",{"slug":23,"title":24,"published_at":25},"unpatched-fridge-firmware-costs-eu-grocers-millions","Unpatched Fridge Firmware Costs EU Grocers Millions","2026-10-15T08:20:19.544+00:00",{"slug":27,"title":28,"published_at":29},"hijacked-ics-controllers-cook-french-supermarket-fridges-to-50c","Hijacked ICS Controllers Cook French Supermarket Fridges to 50°C","2026-10-13T10:20:33.259+00:00",{"slug":31,"title":32,"published_at":33},"outdated-refrigeration-controllers-enable-remote-sabotage-of-french-supermarkets","Outdated Refrigeration Controllers Enable Remote Sabotage of French Supermarkets","2026-10-12T16:20:21.643+00:00",{"slug":35,"title":36,"published_at":37},"otics-cyberattack-spoils-food-stocks-by-hijacking-supermarket-refrigeration-systems","OT\u002FICS Cyberattack Spoils Food Stocks by Hijacking Supermarket Refrigeration Systems","2026-10-12T14:21:37.851+00:00",{"slug":39,"title":40,"published_at":41},"ai-powered-vulnerability-scanning-accelerates-oss-patching-and-ot-security","AI-Powered Vulnerability Scanning Accelerates OSS Patching and OT Security","2026-10-09T10:22:05.082+00:00",{"slug":43,"title":44,"published_at":45},"chinese-state-sponsored-tools-targeted-critical-infrastructure-via-vulnerability-scanning","Chinese State-Sponsored Tools Targeted Critical Infrastructure via Vulnerability Scanning","2026-10-08T22:20:23.684+00:00",{"slug":47,"title":48,"published_at":49},"ransomware-hits-south-africas-air-traffic-control-systems","Ransomware Hits South Africa's Air Traffic Control Systems","2026-09-30T08:20:50.35+00:00",{"slug":51,"title":52,"published_at":53},"ai-powered-defense-for-critical-infrastructure-lessons-from-ukraines-daybreak-program","AI-Powered Defense for Critical Infrastructure: Lessons from Ukraine's Daybreak Program","2026-09-23T21:20:52.905+00:00",{"slug":55,"title":56,"published_at":57},"cyberattacks-on-oil-tankers-expose-critical-otit-security-gaps-in-maritime-sector","Cyberattacks on Oil Tankers Expose Critical OT\u002FIT Security Gaps in Maritime Sector","2026-09-17T18:20:42.392+00:00",{"slug":59,"title":60,"published_at":61},"us-cyber-strategy-leaves-military-linked-civil-infrastructure-exposed","US Cyber Strategy Leaves Military-Linked Civil Infrastructure Exposed","2026-09-17T12:20:38.607+00:00",{"slug":63,"title":64,"published_at":65},"iot-botnets-water-system-attacks-mfa-abuse-highlight-converging-threat-landscape","IoT Botnets, Water System Attacks & MFA Abuse Highlight Converging Threat Landscape","2026-08-27T18:21:49.801+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",48,{"slug":73,"name":74,"problem":75,"stories":76},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",26,{"slug":78,"name":79,"problem":80,"stories":81},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",21,{"slug":83,"name":84,"problem":85,"stories":86},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",16,{"slug":88,"name":89,"problem":90,"stories":91},"patch-management","Automated patch management","Known holes get closed in days, not months.",13,{"slug":93,"name":94,"problem":95,"stories":96},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",12,[98,104,110,115,120,126,132,137],{"family":99,"item":100,"code":101,"title":102,"together":103},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",59,{"family":105,"item":106,"code":107,"title":108,"together":109},"cis","12","Control 12","Network Infrastructure Management",52,{"family":105,"item":111,"code":112,"title":113,"together":114},"13","Control 13","Network Monitoring and Defense",36,{"family":105,"item":116,"code":117,"title":118,"together":119},"7","Control 7","Continuous Vulnerability Management",23,{"family":121,"item":122,"code":123,"title":124,"together":125},"nist-csf","pr-ac","PR.AC-1","Identity Management, Authentication and Access Control (CSF 1.1)",20,{"family":127,"item":128,"code":129,"title":130,"together":131},"nerc-cip","cip-005","CIP-005","CIP-005: Electronic Security Perimeter(s)",19,{"family":121,"item":133,"code":134,"title":135,"together":136},"de-cm","DE.CM-1","Continuous Monitoring",14,{"family":138,"item":139,"code":140,"title":141,"together":142},"gdpr","32","Article 32","Security of processing",11]