← Home

IEC 62443-3-1 Clause 10 – Physical Security Controls

Teaching note: Paraphrased from IEC/TR 62443-3-1:2009 (ISA-TR99.00.01-2007) for learning. The technical report is informational, not a requirements standard. Confirm wording in the published TR. Later normative parts (2-1, 3-3, 4-2) state the shalls.

Reference: IEC/TR 62443-3-1:2009 (ISA-TR99.00.01-2007), Clause 10
Related: IEC 62443-3-1 overview | Defence in Depth | Five Ds of Treating Risk | 2-1 SPE 1 | Clause 5

Technology categories: Overview | Cl. 5 | Cl. 6 | Cl. 7 | Cl. 8 | Cl. 9 | Cl. 10

Clause 10 pages: Cl. 10 | 10.1 Physical protection | 10.2 Personnel security


Purpose

Cyber layers fail if someone can touch the cabinet, USB port or engineering station. Physical security protects personnel, hardware, networks and data from physical events and access — fire, disaster, theft, tampering and walk-up misuse. Many unintentional threats have a physical element.

Align with site security, safety and emergency procedures. Physical safety can override some access restrictions (for example unrestricted Emergency Stop access for vetted personnel).


Technologies in this clause