# What is IEC 62443, and do we need it?

IEC 62443 is a series of international standards for the security of industrial automation and control systems. It covers the asset owner's security programme, the duties of integrators and service providers, the requirements for a whole system divided into zones and conduits, and the requirements for the products themselves, with security levels that describe how capable an attacker a zone should withstand. It is voluntary: no law requires a typical manufacturer to obtain certification against it, but customers, insurers and auditors increasingly use it as the yardstick, and its zones-and-conduits approach is a practical way to organise NIS2 risk measures in a plant. You do not need certification to benefit: divide the plant into zones, list the conduits between them and decide what each may carry. Monitoring then checks the conduits in practice. NetSenX can contribute that evidence: from the Pro plan it reads industrial protocols passively and flags traffic that crosses plant network levels.

FAQ: [OT and IoT](https://netsenx.com/en/faq/ot) · https://netsenx.com/en/faq/what-is-iec-62443-and-do-we-need-it

## Read next

- https://netsenx.com/en/ot-network-monitoring
- https://netsenx.com/en/compare

## Related questions

- [What evidence of attack detection in OT do auditors ask for?](https://netsenx.com/en/faq/what-evidence-of-attack-detection-in-ot-do-auditors-ask-for)
- [Are building management systems such as HVAC and BACnet a cyber risk?](https://netsenx.com/en/faq/are-building-management-systems-a-cyber-risk)
- [Can a hacked heating or access-control system be used to reach our office network?](https://netsenx.com/en/faq/can-a-hacked-heating-or-access-control-system-reach-the-office)
- [Is it normal for a CCTV recorder to connect to servers abroad?](https://netsenx.com/en/faq/is-it-normal-for-a-cctv-recorder-to-connect-to-servers-abroad)
- [Is a meeting-room TV that talks to unknown servers a risk?](https://netsenx.com/en/faq/is-a-meeting-room-tv-that-talks-to-unknown-servers-a-risk)
