ISA/IEC 62443 is increasingly the reference point regardless of jurisdiction. In Europe, standards bodies drafting harmonised standards for the Cyber Resilience Act are looking to it as the technical baseline. In the United States, the Operational Technology Cybersecurity Coalition published a position paper in July 2026 urging federal recognition of 62443 to reduce regulatory fragmentation, and NIST SP 800-82r3 cross-references it.
The standard continues to evolve. The organisation-wide management requirements in IEC 62443-2-1 were updated in 2025, and additional parts addressing IIoT and security evaluation are reported to be under way, though details should be confirmed against ISA and IEC sources.
The commercial pressure is real. Cyber insurers are asking for evidence of zone and conduit segmentation and defined security level targets before renewal, and customers are beginning to ask suppliers for 62443 certification in tenders.
We structure new control system designs around zones, conduits and target security levels from the first network drawing, which makes later audits and insurer questionnaires far easier to answer.
Services Used
Let's discuss how IMSI can deliver a tailored solution for your project.
Get In TouchWe value your privacy
We use cookies to keep the site secure and working properly, and — with your permission — to remember your preferences and understand how the site is used. Read our Cookie Policy and Privacy Policy to learn more.
Strictly Necessary
Required for the site to function (session, security). Always on.
Functional
Remembers preferences such as your dark mode setting.
Analytics
Helps us understand how the site is used, so we can improve it.