IEC 62443 Compliance — SCADA, OT & Industrial Control System Security
IEC 62443 is the international standard family for securing industrial automation and control systems — SCADA, PLCs, HMIs and building controls. It covers asset owners, system integrators and product suppliers, using zones and conduits and target security levels.
The 2026 attacks on supermarket refrigeration controllers and industrial sites in Europe exploited exactly what 62443 addresses: exposed controllers, weak credentials and flat networks. Mutex Systems helps asset owners and suppliers apply it practically.
- Category
- Compliance Framework
- Jurisdiction
- International
- Issuing Body
- ISA and IEC
- Current Version
- ISA/IEC 62443 series (including 2-1, 3-2, 3-3, 4-1 and 4-2)
- Who It's For
- Manufacturers (including automotive), utilities, energy and water, logistics and retail estates with building and refrigeration controls, and OT product suppliers.
Core Domains
A Practical Compliance Path
- 01
OT discovery
Passive asset discovery and external exposure scan of controllers and HMIs.
- 02
Risk assessment
Define zones and conduits and target security levels.
- 03
Harden & segment
Remove internet exposure, enforce secure remote access and segment IT from OT.
- 04
Monitor
Passive OT monitoring feeding a SOC.
Safe for production
OT work is planned around production: passive discovery first, no intrusive scanning of live controllers, and changes agreed with operations.
- Passive OT asset discovery
- Zone and conduit design
- OT monitoring via our managed SOC
OT security that isn’t tribal knowledge
grComply carries IEC 62443 foundational requirements, a zone-and-conduit model and OT-specific evidence, and supports air-gapped on-premises deployment for sensitive plants.
- Foundational requirements as controls
- Zones and conduits model
- OT evidence types
- On-prem / air-gapped deployment option
grComply is Mutex Systems' own multi-tenant GRC automation platform — the framework library, hybrid scanning, risk and audit workflow, and AI-assisted compliance behind every point above are live in production today.
See How grComply WorksCommon Questions About IEC 62443
What is IEC 62443?
A series of international standards for securing industrial automation and control systems, covering asset owners, integrators and product suppliers.
What are zones and conduits?
Zones group assets with similar security needs; conduits are the controlled communication paths between them. Together they define how an OT network is segmented.
How do I protect SCADA systems from attacks like the 2026 refrigeration hacks?
Remove controllers from the public internet, change default credentials, require MFA-protected remote access through a jump host, segment OT from IT and monitor OT networks for new connections and configuration changes.
Ready to Start Your IEC 62443 Programme?
Send us your current posture and timeline. Within two working days you will receive a written response and a proposed scoping call.