Cyber Brews - IEC-62443 Security Levels, Simplified?
Cyber Brews - The Operational Technologies PodcastShow Notes
Series 2 – Episode 5! Cyber Brews: IEC-62443 Security Levels, Simplified?This month’s brew tackles the industrial cybersecurity standard that everyone talks about — but few really get: IEC 62443. If you’ve ever felt lost in a sea of FRs, SRs, and SLs, you’re not alone. We’re here to break it down, coffee (or pint) in hand.
In this episode, we unpack the core components of IEC 62443 — from Foundational Requirements (FRs) to Security Levels (SLs) — and explore what they actually mean for real-world OT environments.
Key topics on tap include:
What the different Security Levels (SL1 to SL4) actually represent — and why SL4 isn’t always the goal The role of Foundational Requirements (FRs) and how they structure your cybersecurity baseline How System Requirements (SRs) map to practical controls in the field Why context matters: understanding your risk, your environment, and your realistic target level
So whether you’re just getting into IEC 62443 or trying to explain it to someone else without inducing a yawn, this episode’s for you.
Grab your brew of choice and join us as we demystify the standard — one security level at a time.
More from Cyber Brews - The Operational Technologies Podcast
Series 3 - Episode 7 A step back in time to 11 December 2005. 06:01 in the morning. A series of explosions at the Buncefield oil storage depot near Hemel Hempstead shook the surrounding area. The blast could be heard up to 125 miles away and registered 2.4 on the Richter scale. In this episode of Cyber Brews, we explore the three questions posed by the UK Competent Authority following the Buncefield incident and consider how they can help organisations rethink their approach to cybersecurity: 🔹 Do we understand what can go wrong? 🔹 Do we know what systems are in place to prevent this happening? 🔹 Do we have information to assure ourselves that they are working effectively? These questions may sound straightforward, but they raise some important challenges for organisations responsible for critical infrastructure. We discuss how they apply to OT cyber risk assessments, security controls, organisational accountability and the evidence needed to demonstrate that cybersecurity measures are actually working. Because having firewalls, procedures and security policies in place is one thing. Understanding what could go wrong, knowing whether the right protections exist, and having evidence that they remain effective is another. Whether you're an OT engineer, cybersecurity professional, site owner or process safety specialist, join us as we explore how lessons from Buncefield can help us ask better questions about industrial cybersecurity. ☕ Grab a brew and join the conversation. Are we asking the right questions about OT cyber risk?
What does a French military fortification from the 1930s have to teach us about OT cybersecurity? Quite a lot, actually.
Series 3 - Episode 3! Artificial Intelligence is rapidly becoming part of the industrial cyber landscape but is it strengthening critical infrastructure, or introducing entirely new risks? In this episode we explore the growing relationship between AI and OT security, discussing how organisations are beginning to rely on AI-driven technologies within critical infrastructure environments.