// IEC 62443 in practice
IEC 62443 for plant operators
IEC 62443-2-1, 3-2, and 3-3 tell a plant operator to zone the site, set a target security level, and keep proof. Hillstrong runs that program on your sites. Resilion scores the work against those clauses. Stepan Company is a customer.
Resilion delivers exactly what cybersecurity leadership and OT teams need: clarity, simplicity, and momentum… it bridges usability with real program execution.
What IEC 62443 requires on a plant
The standard is a set of jobs. 2-1 is the program. 3-2 is the plant partition and the target security level. 3-3 is the system requirements that meet that level. Cite the clause. Then assign an owner.
-
IEC 62443-2-1
The security program. Policies, roles, and the operating model the plant will actually run.
-
IEC 62443-3-2
Zones, conduits, and a target security level. The high-level risk assessment that ranks what to fund first.
-
IEC 62443-3-3
System requirements that meet the target level. Controls mapped to each zone, with evidence as work closes.
Which parts a plant runs first
Start with a high-level IEC 62443-3-2 risk assessment. Three weeks of fieldwork partitions zones and conduits and ranks the exposures worth funding this year. A detailed risk assessment follows when a CapEx decision needs zone-by-zone loss scenarios.
Program design under 2-1 gives those findings a home: charter, RACI, site-tiered work. Read OT security program design for that job. 3-3 controls are then tasks, not a slide.
How Hillstrong runs the work
Hillstrong people stand up the program on site. Findings become owners, close dates, and proof. If you already paid for an assessment, use it. See what to do after an OT security assessment.
Resilion scores maturity against the clauses you run and stores evidence as tasks close. It reads documents and program data. It does not sit on the plant network. See the Resilion platform or book a 30-minute demo.
// FAQ
IEC 62443 questions plant operators ask
- What does IEC 62443 require of a plant operator?
- IEC 62443-2-1 requires a security program. IEC 62443-3-2 requires you to partition the plant into zones and conduits and set a target security level. IEC 62443-3-3 lists the system requirements that meet that level. Hillstrong runs that work on your sites.
- Which IEC 62443 part should a plant start with?
- Start with 3-2. A high-level risk assessment partitions zones and conduits and ranks the exposures worth funding this year. Program design under 2-1 follows so owners and evidence have a home.
- Do we need a new IEC 62443 assessment to start?
- Use the assessment you paid for if it names zones, conduits, and gaps. Hillstrong feeds those findings into program work. A new high-level pass is useful when the last report is stale or scoped to the wrong sites.
- How does Resilion map to IEC 62443?
- Resilion scores maturity against the clauses you run, routes site-tiered tasks to named owners, and stores evidence as work closes. It does not sit on the plant network.
See IEC 62443 work on your fleet
Book a 30-minute demo. We walk zones, target levels, and evidence against the plants you name.