ISA-TR62443-2-2-2025, Security for Industrial Automation and Control Systems, Part 2-2: IACS Security Protection Scheme just released from the International Society of Automation (ISA).
ISA-TR62443-2-2-2025 provides actionable guidance for developing, validating, operating and maintaining a comprehensive security protection scheme (SPS) that safeguards industrial automation and control systems (IACS) in the operating environment.
This technical report outlines a risk-based approach that divides a control system into zones and conduits. Furthermore, it also assigns specific security requirements to each zone. Moreover, it specifies technical, physical and process measures, along with their documentation, to meet those requirements.
Additionally, roles end up clearly defined. An asset owner is accountable. Integration service providers design and implement protections. Maintenance service providers perform ongoing maintenance. Meanwhile, product suppliers develop secure product features and support processes for vulnerabilities and incidents.
Clear Models
Built upon foundational content from the ISA/IEC 62443 series, the report offers clear models based on established requirements, as well as methods for assessment and validation.
The goal of this document is to ensure the asset owner/operator implementing an IACS security program (SP) has the proper mechanisms and procedures to manage the various risks resulting from cyberthreats to IACS.
This technical report is the latest update to the ISA/IEC 62443 series, the widely used global consensus-based automation and control systems cybersecurity standards and technical reports.
“ISA TR62443 2 2 gives asset owners and operators a risk-based approach for day to day security actions,” said Eric Cosman, ISA99 co-chair. “By bringing together technical controls, process maturity and clear accountability, this guidance based on the ISA/IEC 62443 series of standards can help organizations sustain cyber protection across the entire IACS lifecycle.”
Click here for more on the ISA-TR62443-2-2-2025, Security for Industrial Automation and Control Systems, Part 2-2: IACS Security Protection Scheme
Click here to learn more about the ISA/IEC 62443 series.