DKE German Commission for Electrical, Electronic & Information Technologies of DIN and VDE
DIN EN IEC 62443-2-4
; VDE 0802-2-4:2024-11
Security for industrial automation and control systems - Part 2-4: Security program requirements for IACS service providers (IEC 62443-2-4:2023); German version EN IEC 62443-2-4:2024
IT-Sicherheit für industrielle Automatisierungssysteme - Teil 2-4: Anforderungen an das IT-Sicherheitsprogramm von Dienstleistern für industrielle Automatisierungssysteme (IEC 62443-2-4:2023); Deutsche Fassung EN IEC 62443-2-4:2024
Overview
This part of IEC 62443 specifies comprehensive requirements for the IT security capabilities of service providers for industrial automation systems who wish to offer their services to operators during the integration and maintenance of an automation solution. There are no general restrictions on the scope of application. The standard differs from DIN EN IEC 62443-2-4 (VDE 0802-2-4):2020-07 as follows: a) editorial updates and explanations have been included; b) requirements for the application/configuration of technical capabilities have been clarified to avoid misinterpretation. The requirements described for the IT security capabilities of service providers are primarily designed for the application of industrial automation systems. In addition, it is possible to compile a selection of requirements for other applications using so-called profiles.
