IEC 62443 Mapping for OT / ICS Profiles (Informative)¶
Status: Informative
Applies when TPS class is ICS-SCADA.
| UHBS area | IEC 62443 concept | Notes |
|---|---|---|
| Module A protocol fidelity (Modbus etc.) | FR 3 — System integrity / protocol correctness | Exact PDU / exception behavior |
| Module D egress / containment | FR 5 — Restricted data flow | Zone/conduit boundary for decoys |
| Air-gapped sandbox prerequisite | Zones & conduits | Decoys MUST NOT bridge OT zones |
| Module C telemetry | FR 6 — Timely response to events | SIEM-quality OT events |
| Module F static secrets / keys | FR 1 — Identification & authentication | No hardcoded engineering passwords |
| Production Baseline UHQS > 80 | Risk assessment / SL-T | Org sets target security level |
UHBS does not replace a full 62443 assessment; it provides a repeatable decoy quality gate before OT deception assets are placed near production conduits.