EN IEC 62443-2-4:2019

Security for industrial automation and control systems - Part 2-4: Security program requirements for IACS service providers EN IEC 62443-2-4:2019

Publication date:   Jun 17, 2019

General information

60.60 Standard published   Apr 19, 2019

CENELEC

CLC/TC 65X Industrial-process measurement, control and automation

European Norm

25.040.40   Industrial process measurement and control | 35.100.05   Multilayer applications

Buying

Published

Language in which you want to receive the document.

Scope

This part of IEC 62443 specifies a comprehensive set of requirements for security capabilities
for IACS service providers that they can offer to the asset owner during integration and
maintenance activities of an Automation Solution. Because not all requirements apply to all
industry groups and organizations, Subclause 4.1.4 provides for the development of Profiles
that allow for the subsetting of these requirements. Profiles are used to adapt this document
to specific environments, including environments not based on an IACS.

NOTE 1 The term “Automation Solution” is used as a proper noun (and therefore capitalized) in this part of
IEC 62443 to prevent confusion with other uses of this term.

Collectively, the security capabilities offered by an IACS service provider are referred to as its
Security Program. In a related specification, IEC 62443-2-1 describes requirements for the
Security Management System of the asset owner.

NOTE 2 In general, these security capabilities are policy, procedure, practice and personnel related.

Figure 2 illustrates how the integration and maintenance capabilities relate to the IACS and
the control system product that is integrated into the Automation Solution. Some of these
capabilities reference security measures defined in IEC 62443-3-3 that the service provider
must ensure are supported in the Automation Solution (either included in the control system
product or separately added to the Automation Solution).

Life cycle

NOW

PUBLISHED
EN IEC 62443-2-4:2019
60.60 Standard published
Apr 19, 2019

CORRIGENDA / AMENDMENTS

PUBLISHED
EN IEC 62443-2-4:2019/A1:2019

REVISED BY

PUBLISHED
EN IEC 62443-2-4:2024

Relations

Adopted from IEC 62443-2-4:2015 IDENTICAL