Claroty & AS IEC-62443

Protecting critical infrastructure, manufacturing processes, and the cyber-physical systems within them from cyber threats is increasingly important as threats against these organizations grow more prevalent each year. Industrial environments and their underlying operational technology networks are complex, making the establishment of strong cybersecurity measures challenging. This complexity is due to factors like geography, a mix of old and new systems across sites, a wide variety of specialized assets, and the knowledge gaps that exist between traditional IT security practices and operational considerations.

To address these challenges, Australia has confirmed ISA/IEC-62443 as a national cybersecurity standard for critical infrastructure organizations. The standard, referred to as AS IEC-62443, is identical to the original version developed by the International Society of Automation and published by the International Electrotechnical Commission. It provides a comprehensive framework for securing industrial automation and control systems, covering both technical and procedural aspects of cybersecurity.

AS IEC-62443 is positioned to support Australia’s specific regulatory landscape. It aligns with and supports requirements of Security of Critical Infrastructure Act (SOCI) and its amendments and Critical Infrastructure Risk Management Program (CIRMP) requirements.

Having long supported critical infrastructure and manufacturing owners/operators in their efforts to secure complex IACS environments, Claroty is uniquely suited to help Australian organizations align with many of the framework’s requirements. Our comprehensive industrial cybersecurity solutions, including Claroty xDome, Continuous Threat Detection (CTD), and xDome Secure Access were designed for the unique challenges and needs of OT networks. This document outlines how Claroty industrial solutions help to align industrial organizations with the AS IEC-62443 framework.