Security for industrial automation and control systems - technical security requirements for system components.
The standard specifies detailed technical requirements for control-system components (embedded devices, network devices, applications and hosts) derived from the seven foundational requirements of IEC TS 62443-1-1: identification and authentication control, use control, system integrity, data confidentiality, restricted data flow, timely response to events and resource availability.
It defines component security capability levels (SL-C 1–4).
The SL-C level according to IEC 62443-4-2 states directly which security functions (e.g. authentication, firmware-integrity protection) the component provides, making it easier to demonstrate compliance of a vehicle network zone with cybersecurity requirements (e.g. IEC 62443-3-3).
