DIN EN IEC 62443-2-1:2025-07

This part of the IEC 62443 series of standards specifies asset owner security program (SP) policy and procedure requirements for an industrial automation and control system (IACS) in operation. These requirements focus on cybersecurity and security measures that consist of a combination of technical, physical, procedural, and compensatory security measures. These security measures are part of the security program (SP) for secure operation of the facility or the IACS. Not all of the requirements specified in this document are applicable to all IACS. For example, requirements related to specific technologies (for example, wireless) or specific functions (for example, remote access) do not apply to IACS that do not include these technologies or functions. Similarly, not all requirements for protection against malware apply to systems for which no malware protection software is available for any of their devices. Therefore, this document specifies that the asset owner shall identify the IACS security requirements that apply in the specific operating environments. Typical application examples include process and production facilities. This document specifies requirements for asset owners in order to ensure the most secure operation possible.