IEC 62443 at the IT/OT Interface
Join us on Tues. 24th November
10am New York | 3pm London | 7pm Dubai
Ask an AI what protections IEC 62443 requires at the IT/OT interface and you can get wild hallucinations, conflating 62443 with advice from NIST 800-82, the Purdue Model and other sources.
This is unfortunate, because the IT/OT interface is the most widely understood example of a consequence boundary – the connection between two networks with (most often) dramatically different worst credible consequences of compromise.
Consequence boundaries are important and deserve to be defended with much greater than average protections. Clarity as to what is required vs. recommended, and why, and by whom, is much more important than average at this interface.
In this presentation we dig into:
– What IEC 62443 says about the IT/OT interface
– Related NIST 800-82 and Purdue Model guidance
And we compare all this with what very recent guidance says about this boundary, including:
– CI Fortify
– The UK’s Secure connectivity for Operational Technology
– The latest Indian electric power regulations
– New York’s rules for water treatment systems
IEC 62443 is a tremendous resource, but best practices evolve. Join us to see how the latest government and other advice build on the foundation of IEC 62443 at the IT/OT interface, in light of today’s threats.
About the Speaker
Andrew Ginter
Andrew Ginter is the most widely-read author in the industrial security space, with over 35,000 copies of his three books in print. He is a trusted advisor to the world's most secure industrial enterprises, and contributes regularly to industrial cybersecurity standards and guidance.