IEC 62443-4-1 (2018)

IEC 62443-4-1:2018, published by the International Electrotechnical Commission (IEC), specifies the requirements for a secure product development lifecycle for suppliers of industrial automation and control system (IACS) products. It defines the process practices a supplier must follow to design, build, maintain and retire products securely, rather than prescribing the technical features of any individual product.

The standard is organised around practices covering security management, specification of security requirements, secure design, secure implementation, verification and validation testing, defect and vulnerability management, security update handling, and security guidelines for users. It underpins the ISASecure Security Development Lifecycle Assurance certification and works alongside IEC 62443-4-2, which addresses the technical security requirements of the resulting components.