Low-voltage switchgear and controlgear and their assemblies - Security requirements

IEC 63208:2025 This document applies to the main functions of switchgear and controlgear and their assemblies, called equipment, in the context of operational technology (OT 3.1.34). It is applicable to equipment with wired or wireless data communication means and their physical accessibility, within their limits of environmental conditions. It is intended to achieve the appropriate physical and cybersecurity mitigation against vulnerabilities to security threats.

This document provides requirements on the appropriate:

– security risk assessment to be developed including the attack levels, the typical threats, the impact assessment and the relationship with safety;

– levels of exposure of the communication interface and the determination of the equipment security level;

– assessment of the exposure level of the communication interfaces;

– assignment of the required security measures for the equipment;

– countermeasures for the physical access and the environment derived from ISO/IEC 27001;

– countermeasures referring to IEC 62443-4-2 with their criteria of applicability;

– user instructions for installation, operation and maintenance;

– conformance verification and testing