Articles and technical notes ·
SCADA system cybersecurity: where to start, and what IEC 62443 says
Five practical steps to reduce risk in control systems for industry, water and energy, and where the IEC 62443 standard fits.
Control systems that were isolated for years are now connected to the corporate network, to cellular modems and to remote access. In 2020 Israel's National Cyber Directorate warned of attempts to attack SCADA systems at wastewater plants, pumping stations and sewage facilities, and representatives of the Water Authority said no operational damage was caused. The lesson is clear: a control system exposed to a network without protection is a target.
IEC 62443 is a series of standards for securing industrial automation and control systems. It is voluntary in itself, but it is increasingly referenced in regulatory and contractual requirements, for example in the European Union. Its most useful idea for the field is the split into zones, with controlled conduits between them.
Five steps to start: inventory every asset, including gateways, modems and remote units; segment into zones with a firewall between the control network and the corporate network; allow remote access only through a controlled entry point with multi-factor authentication, never directly from the internet; replace default passwords and update firmware on a fixed policy; and back up controller programs and SCADA settings, with a recovery procedure that has been tested.
Field communication equipment needs special attention: a cellular modem or Modbus gateway left on default settings is an open door into the control network. Disable services that are not needed, restrict source addresses and document every change.
Security is a process, not a product. Start with inventory and separation, then add monitoring and recovery drills. For a plan fitted to your site, contact the Teleris engineering team. This article is general and is not legal advice or a certification.