{"id":8234198,"date":"2026-10-24T17:28:56","date_gmt":"2026-10-24T17:28:56","guid":{"rendered":"https:\/\/scn.eu\/?post_type=scn_guide&#038;p=8234198"},"modified":"2026-10-24T17:29:34","modified_gmt":"2026-10-24T17:29:34","slug":"iec-62443-nis2","status":"publish","type":"scn_guide","link":"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/","title":{"rendered":"IEC 62443 and NIS2 \u2013 cybersecurity for industrial networks"},"content":{"rendered":"<div class=\"scn-guide\">\n<h1>IEC 62443 and NIS2 \u2013 cybersecurity for industrial networks<\/h1>\n<p class=\"g-lead\">Control systems and industrial networks are now targets for attack, and NIS2 has made cybersecurity a legal requirement for many organisations. This guide explains IEC 62443, what NIS2 means and which first steps matter most in an OT network.<\/p>\n<div class=\"g-short\"><b class=\"t\">Short answer<\/b><\/p>\n<ul>\n<li><b>IEC 62443<\/b> \u2013 the standard series for cybersecurity in industrial control systems (OT), with requirements for asset owners, integrators and product suppliers.<\/li>\n<li><b>Zones and conduits<\/b> \u2013 divide the network into zones by risk and control all traffic between them.<\/li>\n<li><b>SL 1\u20134<\/b> \u2013 the security levels state what kind of attacker the protection must withstand.<\/li>\n<li><b>NIS2<\/b> \u2013 an EU directive requiring risk management and incident reporting from medium and large organisations in designated sectors. It applies through national law in each EU country.<\/li>\n<li><b>Start with<\/b> \u2013 an inventory, segmentation, secure remote access and a plan for updates.<\/li>\n<\/ul>\n<\/div>\n<h2>Why OT security differs from IT security<\/h2>\n<p>In office IT, confidentiality often comes first. In a control system, availability and safety matter most: the process must not stop and a valve must not be opened by the wrong person. Equipment often stays in service for 15\u201330 years, updates require planned shutdowns and older protocols such as Modbus lack authentication. Meanwhile, ever more machines are connected for remote service.<\/p>\n<div class=\"g-short\">\n<p style=\"margin:0\">This guide is a technical overview, not legal advice. The requirements for your organisation are set by national law and the supervisory authority.<\/p>\n<\/div>\n<h2>What is IEC 62443?<\/h2>\n<p>IEC 62443 is a series of international standards for cybersecurity in industrial automation and control systems. It builds on work by the US organisation ISA, which is why you sometimes see the name ISA\/IEC 62443.<\/p>\n<div class=\"g-tbl\">\n<table>\n<thead>\n<tr>\n<th>Part<\/th>\n<th>Content<\/th>\n<th>Aimed at<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td class=\"n\">62443-2-1<\/td>\n<td>Security programme for operation and maintenance<\/td>\n<td>Asset owners<\/td>\n<\/tr>\n<tr>\n<td class=\"n\">62443-2-4<\/td>\n<td>Security requirements for integrators and service providers<\/td>\n<td>Integrators<\/td>\n<\/tr>\n<tr>\n<td class=\"n\">62443-3-2<\/td>\n<td>Risk assessment, zones and conduits<\/td>\n<td>Asset owners and integrators<\/td>\n<\/tr>\n<tr>\n<td class=\"n\">62443-3-3<\/td>\n<td>System security requirements and security levels<\/td>\n<td>Integrators<\/td>\n<\/tr>\n<tr>\n<td class=\"n\">62443-4-1<\/td>\n<td>Secure product development lifecycle<\/td>\n<td>Product suppliers<\/td>\n<\/tr>\n<tr>\n<td class=\"n\">62443-4-2<\/td>\n<td>Technical security requirements for components<\/td>\n<td>Product suppliers<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3>Three roles<\/h3>\n<p>The asset owner owns and operates the plant and is responsible for the risks. The integrator designs, builds and maintains the system. The product supplier develops the components, such as switches, routers, PLCs and software.<\/p>\n<h3>Security levels SL 1\u20134<\/h3>\n<ul>\n<li><b>SL 1<\/b> \u2013 protection against unintentional mistakes and casual violations.<\/li>\n<li><b>SL 2<\/b> \u2013 protection against intentional attacks with simple means and generic skills.<\/li>\n<li><b>SL 3<\/b> \u2013 protection against sophisticated attacks with moderate resources and control-system knowledge.<\/li>\n<li><b>SL 4<\/b> \u2013 protection against sophisticated attacks with extensive resources and high motivation.<\/li>\n<\/ul>\n<h3>Zones and conduits<\/h3>\n<p>A zone is a group of equipment with the same security requirements, such as a production line or a substation. A conduit is the controlled communication path between zones, typically through a firewall or secure router. The idea is that an intrusion in one zone cannot spread freely to the rest of the plant.<\/p>\n<figure><img loading=\"lazy\" src=\"https:\/\/scn.eu\/wp-content\/uploads\/2026\/10\/scn-guide-iec62443-f1-en.webp\" alt=\"An industrial network divided into zones: corporate network, DMZ and production network with two lines. Firewalls act as conduits between the zones, and supplier remote access goes through a VPN router to the DMZ\" width=\"1520\" height=\"650\" loading=\"lazy\" decoding=\"async\"><figcaption>Zones and conduits: each zone is protected by a controlled way in, and remote access only goes via the DMZ.<\/figcaption><\/figure>\n<h2>What does NIS2 require \u2013 and who is covered?<\/h2>\n<p>NIS2, Directive (EU) 2022\/2555, replaced the first NIS Directive and was due to be transposed by EU member states by October 2024. In Sweden the Cybersecurity Act (2025:1506) has applied since 15 January 2026, and covered organisations must register with the Swedish Agency for Civil Defence (MCF). Other countries are at different stages, and the UK has its own rules.<\/p>\n<p>The directive generally applies to medium and large organisations, from 50 employees or 10 million euros in annual turnover, in designated sectors. These include energy, transport, healthcare, water and digital infrastructure, but also manufacturing of medical devices, electronics, machinery and vehicles, and food and chemicals. Some are covered regardless of size.<\/p>\n<ul>\n<li><b>Risk management<\/b> \u2013 measures for incident handling, continuity, supply chain security, access control and encryption, among others.<\/li>\n<li><b>Management accountability<\/b> \u2013 management must be trained in the security measures and is responsible for their implementation.<\/li>\n<li><b>Incident reporting<\/b> \u2013 an early warning within 24 hours, an incident notification within 72 hours and a final report within one month.<\/li>\n<li><b>Penalties<\/b> \u2013 fines of up to 10 million euros or 2 per cent of global annual turnover for essential entities.<\/li>\n<\/ul>\n<p>Companies outside the scope are still affected, because covered customers must place requirements on their suppliers. Manufacturers of products with digital elements also face the EU Cyber Resilience Act (CRA), Regulation (EU) 2024\/2847, applying in full from December 2027.<\/p>\n<h2>Practical first steps<\/h2>\n<ol>\n<li><b>Take inventory.<\/b> List equipment, firmware versions and connections. You cannot protect what you do not know you have.<\/li>\n<li><b>Segment.<\/b> Divide the network into zones with VLANs in managed switches and firewalls in between. Separate the office network from OT with a DMZ.<\/li>\n<li><b>Control the traffic.<\/b> Industrial firewalls and secure routers with deep packet inspection understand protocols such as Modbus and can block unauthorised commands.<\/li>\n<li><b>Secure remote access.<\/b> No open ports to the internet. Suppliers connect via VPN through a controlled point, with personal accounts and two-factor login.<\/li>\n<li><b>Update and harden.<\/b> Plan firmware updates, change default passwords and disable unused services and ports.<\/li>\n<li><b>Log and monitor.<\/b> Collect logs centrally and raise alarms on anomalies, so incidents are detected in time.<\/li>\n<li><b>Plan for recovery.<\/b> Back up configurations and programs, and test that restoring works.<\/li>\n<\/ol>\n<h3>Examples from different industries<\/h3>\n<ul>\n<li><b>Energy<\/b> \u2013 secure routers between substations and the control centre, and firewalls that understand IEC 61850.<\/li>\n<li><b>Water and wastewater<\/b> \u2013 pumping stations reached via cellular networks and VPN instead of open ports.<\/li>\n<li><b>Factories and machine builders<\/b> \u2013 NAT devices that separate the machine network from the customer\u2019s, and VPN routers for remote service.<\/li>\n<li><b>Railways<\/b> \u2013 secure routers and firewalled gateways that separate on-board subsystems.<\/li>\n<li><b>Hospitals and defence<\/b> \u2013 medical equipment in separate zones, and strict separation between networks of different classification.<\/li>\n<\/ul>\n<h2>What should you demand from suppliers?<\/h2>\n<ul>\n<li>Products certified to <b>IEC 62443-4-2<\/b>, with the security level stated, for example SL 2.<\/li>\n<li>Development to <b>IEC 62443-4-1<\/b>, including vulnerability handling.<\/li>\n<li>A clear statement of how long security updates will be provided.<\/li>\n<li>Secure defaults: no shared default passwords, signed firmware and secure boot. Ideally also a software bill of materials (SBOM).<\/li>\n<li>For integrators and service providers: working methods to <b>IEC 62443-2-4<\/b>.<\/li>\n<\/ul>\n<h2>Common mistakes<\/h2>\n<ol class=\"g-pit\">\n<li><b>A flat network.<\/b> In a single flat network, malware on a service laptop can reach every PLC. Segmentation is often the most effective measure.<\/li>\n<li><b>An air gap that does not exist.<\/b> USB sticks, service laptops and 4G modems added by someone break the isolation. Map every way in.<\/li>\n<li><b>Remote access on the side.<\/b> Port forwarding and remote control tools from a quick fix often stay. Bring all remote access into one controlled solution.<\/li>\n<li><b>The certificate becomes an alibi.<\/b> A certified IEC 62443-4-2 component does not make the system secure. That depends on how zones, conduits and procedures are designed.<\/li>\n<\/ol>\n<h2>Secure network products from SCN<\/h2>\n<p>We supply secure routers, industrial firewalls, NAT devices, VPN routers and managed switches from Moxa, Axiomtek, INSYS icom, HMS Networks and Yaskawa, among others. Some products in the range are certified to IEC 62443-4-2, for example Moxa\u2019s NPort 6600-G2 serial device server at SL 2.<\/p>\n<h3>Examples from our range<\/h3>\n<div class=\"g-prod\"><a class=\"g-pc\" href=\"https:\/\/scn.eu\/en\/product\/edr-g9010\/\"><img loading=\"lazy\" src=\"https:\/\/scn.eu\/wp-content\/uploads\/2026\/10\/moxa-edr-g9010-main.webp\" alt=\"Moxa EDR-G9010 10-Port Gigabit Secure Router\" width=\"800\" height=\"800\" loading=\"lazy\" decoding=\"async\"><span class=\"g-pb\">Moxa<\/span><span class=\"g-pn\">EDR-G9010 10-Port Gigabit Secure Router<\/span><span class=\"g-pw\">Secure router with firewall, IPS and deep packet inspection, and up to 250 IPsec tunnels.<\/span><\/a><a class=\"g-pc\" href=\"https:\/\/scn.eu\/en\/product\/ina200\/\"><img loading=\"lazy\" src=\"https:\/\/scn.eu\/wp-content\/uploads\/2026\/10\/axiomtek-ina200-main.webp\" alt=\"Axiomtek iNA200 DIN-Rail OT Cybersecurity Gateway\" width=\"800\" height=\"800\" loading=\"lazy\" decoding=\"async\"><span class=\"g-pb\">Axiomtek<\/span><span class=\"g-pn\">iNA200 DIN-Rail OT Cybersecurity Gateway<\/span><span class=\"g-pw\">DIN-rail OT cybersecurity gateway with TPM 2.0, LAN bypass, SFP fibre ports and a 5G slot, for \u221240 to 70 \u00b0C.<\/span><\/a><a class=\"g-pc\" href=\"https:\/\/scn.eu\/en\/product\/mrx\/\"><img loading=\"lazy\" src=\"https:\/\/scn.eu\/wp-content\/uploads\/2025\/01\/AF_MRX3_LTE_Basic_600x600_RGB_96dpi__1001658325203.jpeg\" alt=\"INSYS icom MRX3 Modular industrial router\" width=\"800\" height=\"800\" loading=\"lazy\" decoding=\"async\"><span class=\"g-pb\">INSYS icom<\/span><span class=\"g-pn\">MRX3 Modular industrial router<\/span><span class=\"g-pw\">Modular industrial router for secure remote access to machinery and critical infrastructure.<\/span><\/a><\/div>\n<div class=\"g-links\"><a href=\"https:\/\/scn.eu\/en\/product-category\/products\/network-products\/secure-routers\/\">Secure routers<\/a><a href=\"https:\/\/scn.eu\/en\/product-category\/products\/network-products\/vpn-routers\/\">VPN routers<\/a><a href=\"https:\/\/scn.eu\/en\/product-category\/products\/network-products\/ethernet\/managed-switches\/\">Managed switches<\/a><a href=\"https:\/\/scn.eu\/en\/product-category\/products\/network-products\/\">Network products<\/a><\/div>\n<div class=\"g-cta\">\n<p>Want to segment your network or secure remote access? Describe the installation to our engineers \u2013 you get an answer within 24 hours.<\/p>\n<p><a href=\"https:\/\/scn.eu\/en\/contact\/\">Ask an engineer<\/a><\/div>\n<h2>Frequently asked questions<\/h2>\n<details>\n<summary>Is IEC 62443 mandatory?<\/summary>\n<p>The standard itself is voluntary, but it is often used to show that NIS2 requirements are met, and more customers require it in procurement.<\/p>\n<\/details>\n<details>\n<summary>What is the difference between IEC 62443 and ISO\/IEC 27001?<\/summary>\n<p>ISO\/IEC 27001 describes an information security management system for the whole organisation. IEC 62443 is written for industrial control systems, with technical requirements for systems and components. Many use both.<\/p>\n<\/details>\n<details>\n<summary>Is my company covered by NIS2?<\/summary>\n<p>It depends on sector and size. Check your national law and the supervisory authority\u2019s guidance. Companies outside the scope often get requirements from customers who are covered.<\/p>\n<\/details>\n<details>\n<summary>What does SL 2 mean in IEC 62443?<\/summary>\n<p>Security level 2 means protection against intentional attacks using simple means and generic skills. It is a common level for certified industrial network products.<\/p>\n<\/details>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Control systems and industrial networks are now targets for attack, and NIS2 has made cybersecurity a legal requirement for many organisations. This guide explains IEC 62443, what NIS2 means and which first steps matter most in an OT network.<\/p>\n","protected":false},"author":11,"featured_media":8234038,"template":"","meta":{"_yoast_wpseo_focuskw":"iec 62443","_yoast_wpseo_metadesc":"IEC 62443 and NIS2 for industrial networks: zones and conduits, security levels SL 1\u20134, what NIS2 requires and practical first steps for OT security.","_kad_post_transparent":"","_kad_post_title":"hide","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"hide","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","_scn_guide_cats":[869,868,871],"_scn_guide_sectors":[10762],"_scn_guide_type":"industry","_scn_guide_order":60,"footnotes":""},"class_list":["post-8234198","scn_guide","type-scn_guide","status-publish","has-post-thumbnail","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>IEC 62443 and NIS2 \u2013 cybersecurity for industrial networks | SCN<\/title>\n<meta name=\"description\" content=\"IEC 62443 and NIS2 for industrial networks: zones and conduits, security levels SL 1\u20134, what NIS2 requires and practical first steps for OT security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IEC 62443 and NIS2 \u2013 cybersecurity for industrial networks | SCN\" \/>\n<meta property=\"og:description\" content=\"IEC 62443 and NIS2 for industrial networks: zones and conduits, security levels SL 1\u20134, what NIS2 requires and practical first steps for OT security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/\" \/>\n<meta property=\"og:site_name\" content=\"SCN\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-24T17:29:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/scn.eu\/wp-content\/uploads\/2026\/10\/scn-guide-iec62443-f1-en.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1520\" \/>\n\t<meta property=\"og:image:height\" content=\"650\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/guides\\\/iec-62443-nis2\\\/\",\"url\":\"https:\\\/\\\/scn.eu\\\/en\\\/guides\\\/iec-62443-nis2\\\/\",\"name\":\"IEC 62443 and NIS2 \u2013 cybersecurity for industrial networks | SCN\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/guides\\\/iec-62443-nis2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/guides\\\/iec-62443-nis2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/scn.eu\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/scn-guide-iec62443-f1-en.webp\",\"datePublished\":\"2026-10-24T17:28:56+00:00\",\"dateModified\":\"2026-10-24T17:29:34+00:00\",\"description\":\"IEC 62443 and NIS2 for industrial networks: zones and conduits, security levels SL 1\u20134, what NIS2 requires and practical first steps for OT security.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/guides\\\/iec-62443-nis2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/scn.eu\\\/en\\\/guides\\\/iec-62443-nis2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/guides\\\/iec-62443-nis2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/scn.eu\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/scn-guide-iec62443-f1-en.webp\",\"contentUrl\":\"https:\\\/\\\/scn.eu\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/scn-guide-iec62443-f1-en.webp\",\"width\":1520,\"height\":650,\"caption\":\"An industrial network divided into zones: corporate network, DMZ and production network with two lines. Firewalls act as conduits between the zones, and supplier remote access goes through a VPN router to the DMZ\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/guides\\\/iec-62443-nis2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/scn.eu\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IEC 62443 and NIS2 \u2013 cybersecurity for industrial networks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/scn.eu\\\/en\\\/\",\"name\":\"SCN\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/scn.eu\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/#organization\",\"name\":\"Sensor Control Nordic\",\"alternateName\":\"SCN\",\"url\":\"https:\\\/\\\/scn.eu\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/scn.eu\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/SCN-logo-scaled.png\",\"contentUrl\":\"https:\\\/\\\/scn.eu\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/SCN-logo-scaled.png\",\"width\":2560,\"height\":632,\"caption\":\"Sensor Control Nordic\"},\"image\":{\"@id\":\"https:\\\/\\\/scn.eu\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/sensor-control-nordic-ab\"],\"location\":[{\"@type\":\"Place\",\"name\":\"SCN Walsall\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"46 Hall Lane, Walsall Wood\",\"addressLocality\":\"Walsall\",\"postalCode\":\"WS9 9DP\",\"addressCountry\":\"GB\",\"addressRegion\":\"West Midlands\"},\"telephone\":\"+44 1634 300 900\"},{\"@type\":\"Place\",\"name\":\"SCN Stockholm\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Gustav III:s Boulevard 32\",\"addressLocality\":\"Solna\",\"postalCode\":\"169 73\",\"addressCountry\":\"SE\"},\"telephone\":\"+46 8 668 21 00\"},{\"@type\":\"Place\",\"name\":\"SCN Malm\u00f6\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"R\u00f6nnviksgatan 13\",\"addressLocality\":\"Malm\u00f6\",\"postalCode\":\"213 74\",\"addressCountry\":\"SE\"},\"telephone\":\"+46 40 688 02 00\"},{\"@type\":\"Place\",\"name\":\"SCN Sundsvall\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Trafikgatan 11\",\"addressLocality\":\"Sundsvall\",\"postalCode\":\"856 44\",\"addressCountry\":\"SE\"},\"telephone\":\"+46 60 740 75 81\"},{\"@type\":\"Place\",\"name\":\"SCN Helsinki\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Huopalahdentie 24A\",\"addressLocality\":\"Helsinki\",\"postalCode\":\"00350\",\"addressCountry\":\"FI\"},\"telephone\":\"+358 20 734 8600\"},{\"@type\":\"Place\",\"name\":\"SCN Tallinn\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Narva mnt 5\",\"addressLocality\":\"Tallinn\",\"postalCode\":\"10117\",\"addressCountry\":\"EE\"},\"telephone\":\"+372 651 4550\"},{\"@type\":\"Place\",\"name\":\"SCN Oslo\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Kristoffer Robins vei 13\",\"addressLocality\":\"Oslo\",\"postalCode\":\"0978\",\"addressCountry\":\"NO\"},\"telephone\":\"+47 23 88 89 62\"},{\"@type\":\"Place\",\"name\":\"SCN R\u00f8dekro\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"H\u00e6rvejen 8\",\"addressLocality\":\"R\u00f8dekro\",\"postalCode\":\"6230\",\"addressCountry\":\"DK\"},\"telephone\":\"+45 78 74 65 00\"},{\"@type\":\"Place\",\"name\":\"SCN Madrid\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Paseo de la Castellana, 200\",\"addressLocality\":\"Madrid\",\"postalCode\":\"28046\",\"addressCountry\":\"ES\",\"addressRegion\":\"Comunidad de Madrid\"},\"telephone\":\"+34 93 641 59 97\"},{\"@type\":\"Place\",\"name\":\"SCN Tarnowskie G\u00f3ry\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"ul. Ma\u0142a 1B\",\"addressLocality\":\"Tarnowskie G\u00f3ry\",\"postalCode\":\"42-605\",\"addressCountry\":\"PL\"},\"telephone\":\"+48 511 199 460\"}],\"email\":\"sales@scn.eu\",\"areaServed\":[\"SE\",\"NO\",\"DK\",\"FI\",\"EE\",\"GB\",\"PL\",\"ES\"],\"knowsLanguage\":[\"en\",\"sv\",\"da\",\"fi\",\"nb\",\"et\",\"pl\",\"es\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"IEC 62443 and NIS2 \u2013 cybersecurity for industrial networks | SCN","description":"IEC 62443 and NIS2 for industrial networks: zones and conduits, security levels SL 1\u20134, what NIS2 requires and practical first steps for OT security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/","og_locale":"en_US","og_type":"article","og_title":"IEC 62443 and NIS2 \u2013 cybersecurity for industrial networks | SCN","og_description":"IEC 62443 and NIS2 for industrial networks: zones and conduits, security levels SL 1\u20134, what NIS2 requires and practical first steps for OT security.","og_url":"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/","og_site_name":"SCN","article_modified_time":"2026-10-24T17:29:34+00:00","og_image":[{"width":1520,"height":650,"url":"https:\/\/scn.eu\/wp-content\/uploads\/2026\/10\/scn-guide-iec62443-f1-en.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/","url":"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/","name":"IEC 62443 and NIS2 \u2013 cybersecurity for industrial networks | SCN","isPartOf":{"@id":"https:\/\/scn.eu\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/#primaryimage"},"image":{"@id":"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/#primaryimage"},"thumbnailUrl":"https:\/\/scn.eu\/wp-content\/uploads\/2026\/10\/scn-guide-iec62443-f1-en.webp","datePublished":"2026-10-24T17:28:56+00:00","dateModified":"2026-10-24T17:29:34+00:00","description":"IEC 62443 and NIS2 for industrial networks: zones and conduits, security levels SL 1\u20134, what NIS2 requires and practical first steps for OT security.","breadcrumb":{"@id":"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/#primaryimage","url":"https:\/\/scn.eu\/wp-content\/uploads\/2026\/10\/scn-guide-iec62443-f1-en.webp","contentUrl":"https:\/\/scn.eu\/wp-content\/uploads\/2026\/10\/scn-guide-iec62443-f1-en.webp","width":1520,"height":650,"caption":"An industrial network divided into zones: corporate network, DMZ and production network with two lines. Firewalls act as conduits between the zones, and supplier remote access goes through a VPN router to the DMZ"},{"@type":"BreadcrumbList","@id":"https:\/\/scn.eu\/en\/guides\/iec-62443-nis2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/scn.eu\/en\/"},{"@type":"ListItem","position":2,"name":"IEC 62443 and NIS2 \u2013 cybersecurity for industrial networks"}]},{"@type":"WebSite","@id":"https:\/\/scn.eu\/en\/#website","url":"https:\/\/scn.eu\/en\/","name":"SCN","description":"","publisher":{"@id":"https:\/\/scn.eu\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/scn.eu\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/scn.eu\/en\/#organization","name":"Sensor Control Nordic","alternateName":"SCN","url":"https:\/\/scn.eu\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/scn.eu\/en\/#\/schema\/logo\/image\/","url":"https:\/\/scn.eu\/wp-content\/uploads\/2026\/04\/SCN-logo-scaled.png","contentUrl":"https:\/\/scn.eu\/wp-content\/uploads\/2026\/04\/SCN-logo-scaled.png","width":2560,"height":632,"caption":"Sensor Control Nordic"},"image":{"@id":"https:\/\/scn.eu\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/sensor-control-nordic-ab"],"location":[{"@type":"Place","name":"SCN Walsall","address":{"@type":"PostalAddress","streetAddress":"46 Hall Lane, Walsall Wood","addressLocality":"Walsall","postalCode":"WS9 9DP","addressCountry":"GB","addressRegion":"West Midlands"},"telephone":"+44 1634 300 900"},{"@type":"Place","name":"SCN Stockholm","address":{"@type":"PostalAddress","streetAddress":"Gustav III:s Boulevard 32","addressLocality":"Solna","postalCode":"169 73","addressCountry":"SE"},"telephone":"+46 8 668 21 00"},{"@type":"Place","name":"SCN Malm\u00f6","address":{"@type":"PostalAddress","streetAddress":"R\u00f6nnviksgatan 13","addressLocality":"Malm\u00f6","postalCode":"213 74","addressCountry":"SE"},"telephone":"+46 40 688 02 00"},{"@type":"Place","name":"SCN Sundsvall","address":{"@type":"PostalAddress","streetAddress":"Trafikgatan 11","addressLocality":"Sundsvall","postalCode":"856 44","addressCountry":"SE"},"telephone":"+46 60 740 75 81"},{"@type":"Place","name":"SCN Helsinki","address":{"@type":"PostalAddress","streetAddress":"Huopalahdentie 24A","addressLocality":"Helsinki","postalCode":"00350","addressCountry":"FI"},"telephone":"+358 20 734 8600"},{"@type":"Place","name":"SCN Tallinn","address":{"@type":"PostalAddress","streetAddress":"Narva mnt 5","addressLocality":"Tallinn","postalCode":"10117","addressCountry":"EE"},"telephone":"+372 651 4550"},{"@type":"Place","name":"SCN Oslo","address":{"@type":"PostalAddress","streetAddress":"Kristoffer Robins vei 13","addressLocality":"Oslo","postalCode":"0978","addressCountry":"NO"},"telephone":"+47 23 88 89 62"},{"@type":"Place","name":"SCN R\u00f8dekro","address":{"@type":"PostalAddress","streetAddress":"H\u00e6rvejen 8","addressLocality":"R\u00f8dekro","postalCode":"6230","addressCountry":"DK"},"telephone":"+45 78 74 65 00"},{"@type":"Place","name":"SCN Madrid","address":{"@type":"PostalAddress","streetAddress":"Paseo de la Castellana, 200","addressLocality":"Madrid","postalCode":"28046","addressCountry":"ES","addressRegion":"Comunidad de Madrid"},"telephone":"+34 93 641 59 97"},{"@type":"Place","name":"SCN Tarnowskie G\u00f3ry","address":{"@type":"PostalAddress","streetAddress":"ul. Ma\u0142a 1B","addressLocality":"Tarnowskie G\u00f3ry","postalCode":"42-605","addressCountry":"PL"},"telephone":"+48 511 199 460"}],"email":"sales@scn.eu","areaServed":["SE","NO","DK","FI","EE","GB","PL","ES"],"knowsLanguage":["en","sv","da","fi","nb","et","pl","es"]}]}},"_links":{"self":[{"href":"https:\/\/scn.eu\/en\/wp-json\/wp\/v2\/scn_guide\/8234198","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scn.eu\/en\/wp-json\/wp\/v2\/scn_guide"}],"about":[{"href":"https:\/\/scn.eu\/en\/wp-json\/wp\/v2\/types\/scn_guide"}],"author":[{"embeddable":true,"href":"https:\/\/scn.eu\/en\/wp-json\/wp\/v2\/users\/11"}],"version-history":[{"count":2,"href":"https:\/\/scn.eu\/en\/wp-json\/wp\/v2\/scn_guide\/8234198\/revisions"}],"predecessor-version":[{"id":8234239,"href":"https:\/\/scn.eu\/en\/wp-json\/wp\/v2\/scn_guide\/8234198\/revisions\/8234239"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/scn.eu\/en\/wp-json\/wp\/v2\/media\/8234038"}],"wp:attachment":[{"href":"https:\/\/scn.eu\/en\/wp-json\/wp\/v2\/media?parent=8234198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}