SimtoLink Wins "2024 IoT Innovation Enterprise" Title
IEC 62443 is a series of cybersecurity standards for industrial automation and control systems (IACS) developed by the International Electrotechnical Commission (IEC). It covers the full lifecycle, including security levels (SL 0 to 4), risk assessment, security requirements, security design, and security implementation and maintenance. The standard divides an IACS into zones and conduits, and defines requirements such as defense in depth, least privilege, and strong authentication. It applies to industrial control systems and IoT device security in critical infrastructure such as power, oil and gas, manufacturing, and transportation.
Technical features and architecture
The IEC 62443 technical architecture includes security levels (SL), from SL 0 with no protection to SL 4 against nation-state attacks, with the target SL set by asset value and threat; zones and conduits, which divide the system into security zones that communicate through conduits meeting the matching security requirements; security requirements, where the SR series defines identification and authentication, access control, protection of sensitive data, and incident response; and products and systems, which set security requirements separately for components (EDR) and systems (SMS). Combined with intranet isolation, VPN, and a device management platform, this can form an industrial IoT security system that meets IEC 62443.
In cross-border cases, critical infrastructure that spans countries must meet each country's industrial-control security requirements. IEC 62443 provides a security framework used internationally.
Use in IoT and cross-border cases
IEC 62443 is widely used in power industrial control, including substations, microgrids, and charging stations; smart manufacturing, including production-line PLCs, robots, and equipment management systems; oil and gas and transportation, including pipeline SCADA and rail CBTC; and cross-border infrastructure, including transnational grids, cross-border pipelines, and cross-border charging networks. Industrial IoT for cross-border critical infrastructure needs to follow IEC 62443 for security levels and protection.
SimtoLink provides secure connectivity for industrial IoT devices and, together with intranet and VPN, helps put IEC 62443 compliance in place.
Source: https://www.simtolink.com/support/globalsim/iec-62443.html