EN IEC 62443-2-1 EUROPEANSTANDARD NORMEEUROPEENNE EUROPAISCHE NORM September 2024 ICS25.040.40; 35.100.05 English Version Security for industrial automation and control systems - Part 2-1: Security program requirements for IACS asset owners (IEC 62443-2-1:2024) IT-Sicherheit fur industrielle Automatisierungssysteme - Teil Sécuritedes systemes dautomatisation etdecommande industrielles - Partie 2-1: Exigences de programme de 2-1: Anforderungen an ein IT-Sicherheitsprogramm fur sécurite pour les proprietaires d'actif iACs IACS-Betreiber (IEC 62443-2-1:2024) (IEC 62443-2-1:2024) This European Standard was approved by CENELEC on 2024-09-11. CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC ManagementCentreortoanyCENELECmember. This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibilty of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the same status as the official versions. CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus,the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkiye and the United Kingdom. CENELEC European Committee for Electrotechnical Standardization Comite Européen de Normalisation Electrotechnique Europaisches Komitee fur Elektrotechnische Normung CEN-CENELECManagementCentre:RuedelaScience23,B-104oBrussels @ 2024 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members. Ref.No.ENIEC 62443-2-1:2024 E EN IEC 62443-2-1:2024 (E) European foreword The text of document 65/1044/FDIS, future edition 2 of IEC 62443-2-1, prepared by TC 65 "Industrial- process measurement, control and automation" was submitted to the IEC-CENELEC parallel vote and approved by CENELEC as EN IEC 62443-2-1:2024. The following dates are fixed: latest date by which the document has to be implemented at national (dop) 2025-06-11 level by publication of an identical national standard or by endorsement latest date by which the national standards conflictingwith the (dow) 2027-09-11 document have to be withdrawn Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. CENELEC shall not be held responsible for identifying any or all such patent rights. Any feedback and questions on this document should be directed to the users' national committee. A completelistingofthesebodiescanbefoundontheCENELECwebsite. Endorsement notice The text of the International Standard IEC 62443-2-1:2024 was approved by CENELEC as a European Standard without any modification. In the official version, for Bibliography, the following notes have to be added for the standard indicated: IEC 62443-3-2:2020 NOTE Approved as EN IEC 62443-3-2:2020 (not modified) IEC 62443-2-4:2023 NOTE Approved as EN IEC 62443-2-4:2024 (not modified) IEC 62443-3-3:2013 NOTE Approved as EN IEC 62443-3-3:2019 (not modified) IEC 62443-4-2:2019 NOTE Approved as EN IEC 62443-4-2:2019 (not modified) ISO/IEC 27000:2018 NOTE Approved as EN ISO/IEC 27000:2020 (not modified) IEC 62443-4-1:2018 NOTE Approved as EN IEC 62443-4-1:2018 (not modified) ISO/IEC 17000:2020 NOTE Approved as EN ISO/IEC 17000:2020 (not modified) ISO/IEC 27002:2022 NOTE Approved as EN ISO/IEC 27002:2022 (not modified) IEC 62591:2016 NOTE Approved as EN 62591:2016 (not modified) IEC 62734:2014 NOTE Approved as EN 62734:2015