Cyber Risks · Dragos Blog

The ISA/IEC 62443 Series of Cybersecurity Standards

Summary: The ISA/IEC 62443 series specifies security requirements for industrial automation and control systems (IACS), developed and published by the International Society of Automation's ISA99 Committee and IEC Technical Committee 65/Working Group 10. The standards are referenced dozens of times in the NIST Cybersecurity Framework, have been endorsed by the United Nations and integrated into a draft UN Economic and Social Council proposal for a common European cybersecurity regulatory framework, and the IEC has designated the series as "horizontal" for applicability across sectors including building automation, electric power, medical devices, transportation, and oil and gas.

Why it matters: The IEC's "horizontal" designation means these benchmarks are treated as applicable to every sector running industrial control systems, and the series is already written into a draft UN regulatory framework for Europe - so alignment with ISA/IEC 62443 is moving from best practice toward the reference point regulators and supply chains will measure you against.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026