IEC 62443

This series is a working walkthrough of IEC 62443 — the international standard for cybersecurity in industrial automation and control systems. It is written for engineers, integrators and OEMs who have to deliver against the standard's requirements without reading the full set of published parts end to end.

The six articles work from the foundational terminology (zones, conduits, security levels) through the management-system parts that apply to asset owners, the system-design parts that apply to integrators, the component parts that apply to OEMs, and close with NIS2 alignment and a one-page evidence pack for quick reference.

Download the pack

The six articles are available as a single downloadable pack in PDF and EPUB, in both languages. The PDF is the canonical artefact for printed or pinned reference; the EPUB is sized for phones and e-readers.

This release is citable in two ways: the concept DOI 10.5281/zenodo.20276992 always resolves to the latest version of the pack; the v1.0.0 version DOI 10.5281/zenodo.20276993 is frozen to this specific release. The pack is licensed CC BY 4.0 — attribute as: Khanikar, R. (2026). IEC 62443: a walkthrough (v1.0.0). https://doi.org/10.5281/zenodo.20276992

Disclaimer

This series is offered as editorial guidance for technical and procurement audiences. It does not constitute legal, regulatory, or professional advice; the author is not a lawyer, an auditor, or a certification body. The content is provided without warranty of any kind, express or implied — no guarantee of accuracy, completeness, currency, or fitness for any particular product line, project, or jurisdiction. Readers must verify against the primary sources — IEC's published standards — and consult qualified professionals before acting on anything in this series. The IEC standards are the canonical text; this series reflects their content as of the publication date of each article, but standards may have been amended since. The author accepts no responsibility or liability for any decision, action, or omission made in reliance on this content.

Companion reading

This series sits alongside a related body of work on this site:

• OEM EU Readiness — an eighteen-part series for non-EU manufacturers bidding into EU-financed renewable energy projects, several articles of which cross-reference the IEC 62443 parts covered here
• CRA applicability — a walk-through of whether and how the Cyber Resilience Act applies to a given product line
• NIS2 applicability — the entity-side equivalent for operators

The series in order