IEC 62443 is the international standard for the security of industrial control systems (ICS) and operational technology (OT). Part 4-2 covers the technical security requirements for ICS components.
Industrial environments run power grids, factories and water treatment plants. A cyberattack on them can cause physical damage or loss of life, so industrial buyers increasingly expect OT vendors to meet IEC 62443.
TrustDyne maps firmware findings to five IEC 62443-3-3 system requirements: user authentication (SR 1.1), communication integrity (SR 3.1), information confidentiality (SR 4.1), zone boundary protection (SR 5.2) and denial-of-service protection (SR 7.1). The report shows a pass or fail result for each.