← Home

IEC 62443-3-1 Clause 9 – IACS Computer Software

Teaching note: Paraphrased from IEC/TR 62443-3-1:2009 (ISA-TR99.00.01-2007) for learning. The technical report is informational, not a requirements standard. Confirm wording in the published TR. Later normative parts (2-1, 3-3, 4-2) state the shalls.

Reference: IEC/TR 62443-3-1:2009 (ISA-TR99.00.01-2007), Clause 9
Related: IEC 62443-3-1 overview | System Hardening | 2-1 Component Security | 4-2 Embedded devices | 4-2 Host devices

Technology categories: Overview | Cl. 5 | Cl. 6 | Cl. 7 | Cl. 8 | Cl. 9 | Cl. 10

Clause 9 pages: Cl. 9 | 9.1 Server/workstation OS | 9.2 Real-time/embedded OS | 9.3 Web technologies

Purpose

The operating system and middleware are both the platform and a large share of the attack surface. Hardening and least functionality apply before adding security products. This clause covers server/workstation OS, real-time/embedded OS, and web technologies used on or toward the IACS.

Technologies in this clause