PD IEC TR 63486:2024 PDF

1 Scope

1.1 General IEC 62645 [1]1 provides a cybersecurity framework for digital I&C programmable systems2. IEC 62645 [1] aligns strongly with the information security management system (ISMS) elements detailed within ISO/IEC 27001:2013 [2]. The “I&C digital programmable system security programme” (as defined in 5.2.1 of IEC 62645:2019 [1]) align with the ISMS programme. The framework for this programme assigns security degrees (SD) to I&C systems and EPS and defines cybersecurity requirements based upon these SDs. The assignment of an SD corresponds heavily to the safety categorization of IEC 61513 [3] and IEC 61226 [4]. IEC 62645 [1] does not provide detailed guidance on risk management. The only guidance outlined in IEC 62645:2019 [1] is in 5.4.3.2.2.4, and it states, that