FOR USE AND REVIEW ONLY BY MEMBERS OF ISA99 AND APPROVED PARTIES: This abridged copy of a published 62443 document is to be used solely for the purpose of supporting the further development of ISA-62443 standards. This is an excerpt from a published ISA standard. It is to be used solely for the purpose of supporting the further development of ISA-62443 standards. It is subject to change without notice. It may not be reproduced or distributed to others, offered for sale, or used for commercial purposes. Copyright © by the International Society of Automaton. All rights reserved. Not for resale. Printed in the United States of America. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), without the prior written permission of the Publisher. ISA 67 Alexander Drive P. O. Box 12277 Research Triangle Park, North Carolina 27709 USA This page intentionally left blank ABRIDGED s. d ar d stanses. 3 o 44urp 2p SA-6cial of Imer pment or com develoused f urther ale, or ANSI/ISA 62443 3 3 (99.03.03)-2013 he for s g td f ne Security for industrial automation portioffer and control systems ups, Part 3-3: System security requirements se of so other and security levels pod t purute Approved 12 August 2013 or the distrib y for eld ole d sduc eo uspr o be be re s tot nt iy n ea mm docue. It 43 otic 4n 62ut shed witho a publihange dged copy of s subject to c briIt i a s hi T ABRIDGED s. d ar d stanses. 3 o 44urp 2p SA-6cial of Imer pment or com develoused f urther ale, or he for s g td f ne portioffer ups, se of so other pod t purute or the distrib y for eld ole d sduc eo uspr o be be re ANSI/ISA 62443 3 3 (99.03.03)-2013 s tot nt iy n ea Security for industrial automation and control systems mm Part 3-3: System security requirements and security levels 43 docuotice. It 4n ISBN: 978-0-876640-39-5 62ut Copyright © 2013 by ISA. All rights reserved. Not for resale. Printed in the United States of a published hange witho A merica. dged copy of s subject to c ISA briIt i a s 67 Alexander Drive hi T P. O. Box 12277 Research Triangle Park, NC 27709 USA ABRIDGED 12 August 2013 3 ANSI/ISA-62443-3-3 (99.03.03)-2013 PREFACE This preface, as well as all footnotes and annexes, is included for information purposes and is not part of ANSI/ISA 62443 3 3 (99.03.03)-2013. This document has been prepared as part of the service of ISA, the International Society of s. d Automation, toward a goal of uniformity in the field of instrumentation. To be of real value, this ar d dSooccuiemtye nwte slchoomuleds naollt cboem msteantitcs bauntd schroituicldis mbes asnudb jaesckt st oth paet rtihoedyic b ere avdiedwre. sTsoewd atrod ththei sS eecnrde,t atrhye, 3 stanoses. Standards and Practices Board; ISA; 67 Alexander Drive; P. O. Box 12277; Research Triangle 44urp 2p Park, NC 27709; Telephone (919) 549-8411; Fax (919) 549-8288; E-mail: [email protected]. SA-6cial The ISA Standards and Practices Department is aware of the growing need for attention to the of Imer mpreetpriacr astyiosnte omf ionfs turnuimtse nint agtieonne sratal nadnadr dtsh.e T Ihnete Drneaptaiorntmale nSty isst efumr thoef rU anwitasr e(S oI)f itnh ep baertniceufiltasr ,t oin U tShAe pment or com uthseeirrs b oufs iInSeAs ss taanndd aprrdosf eosfs iinocnoarl pdoeraatliinnggs s wuiittahb oleth reerf ecroeunnctersie sto. Tthoew aSrId ( athnids tehned ,m tehtirsi cD seypsatertmm)e nint develoused f wreicllo menmdeenadveodr ptroa citnictreosd uacned tSecI-hancicceapl traebploer tsm teot rtich e ugnrietsa teins t eaxllt ennet wp osasnidb ler.e Svitsaendd asrdta fnodra Urdsse, urther ale, or of the International System of Units (SI): The Modern Metric System, published by the American he for s Society for Testing and Materials as IEEE/ASTM SI 10-97, and future revisions, will be the g td f ne reference guide for definitions, symbols, abbreviations, and conversion factors. portioffer Iarten pidso rtithnset.e Prpeaosrltticiscy i pinoa ft itoIhSneA i ndt oeth veeen lIocSpoAmu rseatngaten doaafn rddISs w-Ame lascktoaimnngde a ptrrhdoesc ,e psarser tcbicoyim paamnti eoinnndd eiovdfi d auplalr alc ciontni cnceoes rw neaadny d ci notdneisvctihditnuuitacealssl se of supo others, epCnrAadUcotTricsIeOesmN ae nnd t I bSteyAc t hhanedi cheamel rrpeelsop yoterotrs ot thfh etah tpa ItoS liAnic ddyive iovdefu laothlp,e so .f A ImSAer oicr aonf aNnayt ioofn tahle Ssttaannddaarrddss, Irnesctoimtumtee nwdiethd y for the purpoor distributed t regard to patents. If ISA is informed of an existing patent that is required for use of the eld ole standard, it will require the owner of the patent to either grant a royalty-free license for d sduc use of the patent by users complying with the standard or a license on reasonable terms eo uspr and conditions that are free from unfair discrimination. o be be re Even if ISA is unaware of any patent covering this Standard, the user is cautioned that s tot implementation of the standard may require use of techniques, processes or materials nt iy n ea covered by patent rights. ISA takes no position on the existence or validity of any patent mm rights that may be involved in implementing the standard. ISA is not responsible for docue. It identifying all patents that may require a license before implementation of the standard or 43 otic for investigating the validity or scope of any patents brought to its attention. The user 624ut n sinhtoeunldde dc aarpplication. shed witho However, ISA asks that anyone reviewing this standard who is aware of any patents that a publihange mDAeqdeaupdyiai ptriimtommnepeananltlc.ty t ,o T fith mhtehep e lse uptmsaaeent endontaaftr tdaiton hndics a itonssfnt aootnwth dneaa ernrsdt.ti acmnipdaayat redi n avnlolo lvtpiefoy shstahizbeal erdI SoaAup sp Slmitcaaanttdieoarniradsl ss ,o aro npdaed rdaPtrrieaoscnstsi c aeolsrl bridged copy of It is subject to c possible safety issues associated with use in hazardous conditions. The user of this a s standard must exercise sound professional judgment concerning its use and applicability hi T any governmental regulatory limitations and established safety and health practices before implementing this standard. ABRIDGED ANSI/ISA-62443-3-3 (99.03.03)-2013 4 12 August 2013 The following served as active members of ISA99 Working Group 4, Task Group 2 in developing this standard: Name Company Contributor Reviewer Jeff Potter, TG Chair Emerson X s. d Adedotun Adeyemi Quaddynamics Nigeria Ltd X ar d Leandro Pfleger de Aguiar Chemtech - Siemens X stanses. Raghu Avali Westinghouse Electric Corp X 443 urpo 2p Satishkumar Balasubramanian Yokogawa IA Technologies X SA-6cial Rahul Bhojani Bayer X of Imer WAnatyonney BCoaypeerl UCSom Idgaahteo ENnagtiionneaelr iLnagb Lotrda.t ory XX pment or com Penny Chen Yokogawa Corp. of America X develoused f EJorihcn C Coussmimana no TEhxeid aD ow Chemical Co. X X urther ale, or Kelli Dean Okonite X he for s g td f ne Aris Espejo Syncrude Canada Ltd. X portioffer Dean Ford Glenmount Global Solutions X ups, DJaomnaelsd GFirlassinenr JKaecnoebxsis X X pose of sd to other Thomas Good DuPont X purute Vic Hammond US Argonne National Laboratory X or the distrib Jean-Pierre Hauet KB Intelligence X y for eld Dennis Holstein Opus Consulting Group X d solduce Charles Hoover Rockwell Automation X usepro Bob Huba Emerson X o be be re Freemon Johnson US State Department X s tot Pierre Kobes Siemens X ent iay n mm Sinclair Koelemij Honeywell Industrial IT Solutions X docue. It Erwin Kruschitz Anapur AG X 43 otic 4n Tyson Macaulay Bell Business Markets (Bell Canada) X 62ut Pete MacLeod Engenuity Consulting X shed witho WWKAOejlaaialvlyyviian n MMm eMi o sMMi hnarinlanliecg rke s UMGIAnBSEavBe C OEn TAnas eSkUys r SRg -Ayi d T greic oNnaetixo nal Laboratory XXXXX bridged copy of a publiIt is subject to change a John Munro US Oak Ridge National Laboratory X s hi Johan Nye ExxonMobil X T CyberSecurity Malaysia X Tom Phinney Consultant X Ragnar Schierholz ABB AG X ABRIDGED 12 August 2013 5 ANSI/ISA-62443-3-3 (99.03.03)-2013 Graham Speake Yokogawa X Kevin Staggs Honeywell X Herman Storey Herman Storey Consulting X Tatsuaki Takabe Yokogawa X s. Steven Tom US Idaho National Laboratory X ard d Gerd Wartmann Endress + Hauser X stanses. Vernon Williams Patria Group X 443 urpo 2p SA-6cial of Imer pment or com develoused f urther ale, or he for s g td f ne portioffer ups, se of so other pod t purute or the distrib y for eld ole d sduc eo uspr o be be re s tot nt iy n ea mm docue. It 43 otic 4n 62ut shed witho a publihange dged copy of s subject to c briIt i a s hi T ABRIDGED s. d ar d stanses. 3 o 244purp of ISA-6mercial pment or com develoused f urther ale, or he for s g td f ne portioffer ups, This page intentionally left blank. se of so other pod t purute or the distrib y for eld ole d sduc eo uspr o be be re s tot nt iy n ea mm docue. It 43 otic 4n 62ut shed witho a publihange dged copy of s subject to c briIt i a s hi T ABRIDGED 12 August 2013 7 ANSI/ISA-62443-3-3 (99.03.03)-2013 CONTENTS PREFACE .............................................................................................................................. 3 FOREWORD ........................................................................................................................ 10 ds. ar d 0 Introduction .................................................................................................................... 11 stanses. 0.1 Overview ............................................................................................................... 11 3 o 0.2 Purpose and intended audience ............................................................................ 12 244purp 0.3 Usage within other parts of the ISA 62443 series ................................................. 12 SA-6cial 1 Scope ............................................................................................................................ 15 of Imer 2 Normative references ..................................................................................................... 15 pment or com 3 T33..e12r msTA, ebdrbemrfeisnv iaitainotden dsd, e taefibrnmbitrsieo avninsad .t.e .a.d.c. .tr.eo.r.n.m.y.m.s.,.s .a. ..c....r..o....n....y....m....s....,.. ..a....n....d.... ..c....o....n..v....e....n....t..i..o....n....s.... ................................................................................................ 112551 urther develoale, or used f 3.3 Conventions .......................................................................................................... 23 he for s 4 Common control system security constraints .................................................................. 24 g td f ne 4.1 Overview ............................................................................................................... 24 portioffer 44..23 SCuopmppoernt soaf teinsgs ecnotuianlt efurmncetiaosnusr e..s.. ...................................................................................................................................................... 2244 se of supo others, 4.4 Least privilege ...................................................................................................... 25 pod t 5 F5.R1 1 P Iudrepnotsifeic aantido nS La-nCd( IaAuCth)e dnetisccartiipotnio cnosn ..t.r.o..l. ............................................................................................................................ 2255 or the purdistribute 5.2 Rationale .............................................................................................................. 25 ely fd or ole 5.3 SR 1.1 Human user identification and authentication .......................................... 25 d sduc 5.4 SR 1.2 Software process and device identification and authentication ................ 27 usepro 5.5 SR 1.3 Account management ............................................................................. 28 o be be re 5.6 SR 1.4 Identifier management ............................................................................ 28 s tot 5.7 SR 1.5 Authenticator management ..................................................................... 29 ent iay n mm 55..89 SSRR 11..67 WStirreenlegsths oafc cpeassss wmoarnda-bgaesmeedn at u..t.h..e..n..t.ic..a..t.i.o..n.. ........................................................................................ 3301 43 docuotice. It 5.10 SR 1.8 Public key infrastructure (PKI) certificates .............................................. 32 4n 62ut 555...111123 SSSRRR 111...911 01 S AUtrunetsnhugectnhct eiocsfas ptfouurlb flloeicge ikdneb yaa tcatkeu m.t.h.p.e.t.ns..t ..i..c..a....t..i..o....n.... .................................................................................................................................................................. 333344 a published hange witho 6 55F..R1145 2 SS RRUs 11e.. 11c23o nt rSAocyl sc..te.e.s.m.s. . .vu.i.sa..e .u .n.n.o.t.rt.ui.f.si.c.t.ae..td.io. .nn.e. ..t..w......o....r..k....s.. .......................................................................................................................................................................................... 333655 dged copy of s subject to c 6.1 Purpose and SL-C(UC) descriptions ...................................................................... 36 briIt i a 6.2 Rationale .............................................................................................................. 36 s hi T 6.3 SR 2.1 Authorization enforcement ...................................................................... 37 6.4 SR 2.2 Wireless use control ............................................................................... 38 6.5 SR 2.3 Use control for portable and mobile devices ........................................... 39 6.6 SR 2.4 Mobile code ............................................................................................ 39 ABRIDGED ANSI/ISA-62443-3-3 (99.03.03)-2013 8 12 August 2013 6.7 SR 2.5 Session lock ........................................................................................... 40 6.8 SR 2.6 Remote session termination ................................................................... 40 6.9 SR 2.7 Concurrent session control ..................................................................... 41 6.10 SR 2.8 Auditable events ..................................................................................... 41 6.11 SR 2.9 Audit storage capacity ............................................................................ 42 s. d 6.12 SR 2.10 Response to audit processing failures .................................................. 43 dar 6.13 SR 2.11 Timestamps .......................................................................................... 43 stanses. 3 o 6.14 SR 2.12 Non-repudiation .................................................................................... 44 44urp 2p 7 FR 3 System integrity .................................................................................................. 45 SA-6cial 7.1 Purpose and SL-C(SI) descriptions ....................................................................... 45 of Imer 77..23 RSRat i3o.n1a le C ..o..m...m...u.n..i.c..a..t.i.o..n. .i.n..t.e..g..r.i.t.y.. .................................................................................................................................................. 4455 pment or com 7.4 SR 3.2 Malicious code protection ....................................................................... 46 develoused f 77..56 SSRR 33..34 SSeocftuwraitrye f uanncdt iionnfoarlmitya tvioenri fiinctaetgiornit y.. .................................................................................................................... 4478 urther ale, or 7.7 SR 3.5 Input validation ....................................................................................... 49 he for s 7.8 SR 3.6 Deterministic output ................................................................................ 49 ng ted f 7.9 SR 3.7 Error handling......................................................................................... 50 portioffer 77..1101 SSRR 33..89 SPreostseicotnio inn toefg ariutyd .i.t. .i.n..f.o.r..m..a..t.i.o..n.. ................................................................................................................................ 5501 se of supo others, 8 FR 4 Data confidentiality ............................................................................................. 52 pod t 88..12 PRuartpioonsaele a .n..d.. .S..L..-.C..(..D..C..).. .d..e.s..c..r.i.p..t.i.o..n..s. ............................................................................................................................................ 5522 or the purdistribute 8.3 SR 4.1 Information confidentiality ....................................................................... 52 y for eld ole 8.4 SR 4.2 Information persistence .......................................................................... 53 d sduc 8.5 SR 4.3 Use of cryptography ............................................................................... 54 usepro 9 FR 5 Restricted data flow ............................................................................................ 55 o be be re 9.1 Purpose and SL-C(RDF) descriptions.................................................................... 55 s tot 9.2 Rationale .............................................................................................................. 55 ent iay n mm 9.3 SR 5.1 Network segmentation ............................................................................ 55 docue. It 9.4 SR 5.2 Zone boundary protection ....................................................................... 56 43 otic 9.5 SR 5.3 General purpose person-to-person communication restrictions ............... 57 624ut n 10 9F1.0R6.1 6 SP RTuri mp5o.e4sl ye raAenspdpp oSlincLas-etCi o(tTno RpeEaver)t ndittiesos n.c.i.rn.i.gp..t ..i..o....n..s.... ............................................................................................................................................................................................................ 555888 a published hange witho 111000...234 RSSRRat i66o..n12a le AC ..uo..dn..itt.i .nl.o.u.go.. u.a.s.c. .cm..e.os..ns..iit.bo..irl.i.itn.y.g. .. .................................................................................................................................................................................................................................... 555999 dged copy of s subject to c 11 FR 7 Resource availability ........................................................................................... 60 briIt i a 11.1 Purpose and SL-C(RA) descriptions ...................................................................... 60 his T 11.2 Rationale .............................................................................................................. 61 11.3 SR 7.1 Denial of service protection .................................................................... 61 11.4 SR 7.2 Resource management ........................................................................... 61 11.5 SR 7.3 Control system backup ........................................................................... 62