International standard series · Security for industrial automation and control systems
IEC 62443-4-1 and 4-2
The IEC 62443 series addresses the security of industrial automation and control systems (IACS). For product makers, part 4-1 sets requirements for a secure product development lifecycle and part 4-2 sets the technical security requirements for components.
Checked 18 Oct 2026
What it asks of product makers
- A target security capability level for each component.
- Component requirements and their enhancements, met and evidenced.
- Secure development practices across the product lifecycle.
How Complia supports the work
- 01
References down to the requirement
Requirements carry references such as “IEC 62443-4-2 CR 1.1”, grouped by their source family.
- 02
Together with the CRA
When you start a CRA product, IEC 62443 can be activated alongside it in the same step.
- 03
Cross-mapping
See where requirements from different frameworks overlap, so one piece of evidence can support several of them.
- 04
Shared evidence
Evidence for a common component can be inherited by the products you belong to that use it.
What stays with you
Target security levels are your design decision, and an IEC 62443 certificate comes from an independent certification body.
Other frameworks
See it with your own product.
We go through your requirements, owners and next steps in a walkthrough.