Achieving IEC 62443 Compliance in Operational Technology

This white paper outlines the challenges and solutions related to achieving compliance with the IEC/ISA 62443 standard in Operational Technology (OT) environments. It discusses the limitations of traditional networking approaches, which often require significant infrastructure overhauls that are impractical for many industrial settings. The paper introduces NetFoundry's Software-Defined Zero Trust Overlays as a pragmatic solution that allows OT engineers to manage security without extensive networking expertise. It details how this approach enables granular microsegmentation and policy-defined conduits across various levels of the Purdue Model while utilizing existing hardware. The document also emphasizes the importance of zones and conduits in maintaining security integrity and confidentiality as outlined in the IEC/ISA 62443-3-3 standard. Key compliance benefits of the NetFoundry solution are presented, highlighting its ability to decouple governance from underlay network changes, thus facilitating operational continuity and reducing the need for disruptive hardware upgrades.