What it means
IEC 62443 is the reference for industrial IoT, gateways and building systems. Buyers often require a security level target such as SL 1 or SL 2, and evidence is usually produced through a certification or an independent assessment.
Applies to
- Industrial gateways, controllers and sensors
- Building and energy management devices
- Vendors selling into critical infrastructure
What it does not cover
- Consumer IoT baselines, which are lighter weight
- Classic IT security certification
- Functional safety requirements
Verification checklist
- Define the target security level and zones for the product
- Apply secure development and hardening requirements
- Document threat model, access control and update process
- Complete an independent assessment or certification