IEC TS 62443-1-1:2009

FOREWORD
INTRODUCTION
1 Scope
  1.1 General
  1.2 Included functionality
  1.3 Systems and interfaces
  1.4 Activity-based criteria
  1.5 Asset-based criteria
2 Normative references
3 Terms, definitions and abbreviations
  3.1 General
  3.2 Terms and definitions
  3.3 Abbreviations
4 The situation
  4.1 General
  4.2 Current systems
  4.3 Current trends
  4.4 Potential impact
5 Concepts
  5.1 General
  5.2 Security objectives
  5.3 Foundational requirements
  5.4 Defence in depth
  5.5 Security context
  5.6 Threat-risk assessment
       5.6.1 General
       5.6.2 Assets
       5.6.3 Vulnerabilities
       5.6.4 Risk
       5.6.5 Threats
       5.6.6 Countermeasures
  5.7 Security program maturity
       5.7.1 Overview
       5.7.2 Maturity phases
  5.8 Policies
       5.8.1 Overview
       5.8.2 Enterprise level policy
       5.8.3 Operational policies and procedures
       5.8.4 Topics covered by policies and procedures
  5.9 Security zones
       5.9.1 General
       5.9.2 Determining requirements
  5.10 Conduits
       5.10.1 General
       5.10.2 Channels
  5.11 Security levels
       5.11.1 General
       5.11.2 Types of security levels
       5.11.3 Factors influencing SL(achieved) of a zone or
              conduit
       5.11.4 Impact of countermeasures and inherent security
              properties of devices and systems
  5.12 Security level lifecycle
       5.12.1 General
       5.12.2 Assess phase
       5.12.3 Develop and implement phase
       5.12.4 Maintain phase
6 Models
  6.1 General
  6.2 Reference models
       6.2.1 Overview
       6.2.2 Reference model levels
  6.3 Asset models
       6.3.1 Overview
       6.3.2 Enterprise
       6.3.3 Geographic sites
       6.3.4 Area
       6.3.5 Lines, units, cells, vehicles
       6.3.6 Supervisory control equipment
       6.3.7 Control equipment
       6.3.8 Field I/O network
       6.3.9 Sensors and actuators
       6.3.10 Equipment under control
  6.4 Reference architecture
  6.5 Zone and conduit model
       6.5.1 General
       6.5.2 Defining security zones
       6.5.3 Zone identification
       6.5.4 Zone characteristics
       6.5.5 Defining conduits
       6.5.6 Conduit characteristics
  6.6 Model relationships
Bibliography

IEC/TS 62443-1-1:2009(E) is a technical specification which defines the terminology, concepts and models for Industrial Automation and Control Systems (IACS) security. It establishes the basis for the remaining standards in the IEC 62443 series.