62443-3-2

IEC 62443-3-2 — Risk assessment for zone and conduit design

Describes the methodology for defining zones and conduits and setting a Security Level Target (SL-T) per zone based on risk.

For which role

Asset owners and system integrators who design the network architecture.

Key topics

•Segmenting the system into zones and conduits
•Risk assessment per zone
•Setting Security Level Targets

Expected results

•A documented zone and conduit design
•Substantiated SL-T per zone

Relationship to other parts of the standard

Provides the architecture and objectives that -3-3 (system requirements) must satisfy.

Practical example from the energy sector

When designing a new substation, the substation LAN is defined as a separate zone with a higher SL-T than the office network, because of its critical function.