IEC IEC PAS 62443-2-2 Edition 1.02025-03 PUBLICLYAVAILABLE SPECIFICATION Security for industrial automation and control systems - Part 2-2:IAcS security protection scheme IEC PAS 62443-2-2:2025-03(en) THISPUBLICATIONIS COPYRIGHTPROTECTED Copyright@2025IEC,Geneva,Switzerland or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either IEC or IEC's member National Committee in the country of the requester. If you have any questions about IEC copyright or have an enquiry about obtaining additional rights to this publication, please contact the address below or your local IEC member National Committee for further information. IEC Secretariat Tel.: +41 22 919 02 11 3, rue de Varembe [email protected] CH-1211Geneva 20 www.iec.ch Switzerland About the IEC The International Electrotechnical Commission (IEC) is the leading global organization that prepares and publishes International Standards for all electrical, electronic and related technologies. AboutIEC publications The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the latest edition, a corrigendum or an amendment might have been published. IEC publications search -webstore.iec.ch/advsearchform IEc Products & Services Portal -products.iec.ch The advanced search enables to find IEC publications by a Discover our powerful search engine and read freely all the varietyof criteria (reference number, text, technical publications previews, graphical symbols and the glossary. committee, ..). It also gives information on projects, replaced With a subscription you wili always have access to up to date and withdrawn publications. content tailored to your needs. IEc Just Published - webstore.iec.ch/justpublished Electropedia-www.electropedia.org Stay up to date on all new IEC publications. Just Published The world's leading online dictionary on electrotechnology, details all new publications released. Available online and once containing more than 22 500 terminological entries in English a month by email. and French, with equivalent terms in 25 additional languages. Also known as the International Electrotechnical Vocabulary IECCustomerServiceCentre-webstore.iec.ch/csc (IEV) online. If you wish to give us your feedback on this publication or need further assistance, please contact the Customer Service Centre:[email protected]. IEC IEC PAS 62443-2-2 Edition 1.02025-03 PUBLICLY AVAILABLE SPECIFICATION Security for industrial automation and control systems - Part 2-2: IAcS security protection scheme INTERNATIONAL ELECTROTECHNICAL COMMISSION ICS 25.040.40; 35.100.05 ISBN 978-2-8327-0299-4 Warning! Make sure that you obtained this publication from an authorized distributor. ? Registered trade IECPAS62443-2-2:2025IEC2025 - 2 - CONTENTS FOREWORD INTRODUCTION. .6 Scope.. 1 2 Normative references ... 3 Terms,definitions,abbreviatedterms and acronyms 3.1 Terms and definitions.. 3.2 Abbreviated terms and acronyms.. 4 Relationship between this document and other documents .. ....10 5 Securityprogramand securityprotection scheme 5.1 Relationship between security program and security protection scheme... .11 5.2 Process steps forthegenerationof a SecurityProtectionScheme. .12 Security protection ratings .... 6 .14 6.1 Overview..... .14 6.2 Use of the maturity model defined in IEC 62443-2-1 for the determination of SPR values....... 6.3 Use of alternative SPR matrixes for internal purposes..... 6.4 Grouping of security requirements .. .18 6.5 Tracing to SPEs and sub-SPEs.. .18 6.6 Views.... 6.7 SPR and SL types... .20 6.7.1 General. .20 6.7.2 SL types for products. 6.7.3 SPR types used in an IACS life cycle.. 7 Principal roles.. .22 7.1 Overview. .22 7.2 Asset owner... 7.3 Integration service provider.. ...24 7.4 Maintenance service provider ...24 7.5 Product supplier.. 7.6 Other roles. ..25 8 Duties and activities in the IAcs life cycle related to the security protection scheme.. ..25 8.1 Ove