IEC 62443-4-2 (2019)

IEC 62443-4-2:2019, published by the International Electrotechnical Commission (IEC), defines the technical security requirements for the individual components that make up an industrial automation and control system (IACS). It covers four component types: embedded devices, host devices, network devices and software applications, and derives their requirements from the foundational requirements and security levels of the IEC 62443 series.

For each component the standard specifies component requirements and, where relevant, requirement enhancements needed to achieve security levels SL 1 to SL 4. It complements IEC 62443-3-3, which addresses security at the system level, and IEC 62443-4-1, which addresses the development process, giving suppliers a technical baseline against which products can be assessed and certified.