IEC 62443 Foundations
IEC 62443 is an internationally recognised series of standards addressing cyber security for Industrial Automation and Control Systems. It provides a structured approach to managing cyber risk across the design, operation, maintenance and supply chain of an OT environment.
For organisations operating Critical National Infrastructure and other industrial systems, understanding IEC 62443 is essential. A cyber incident within OT can disrupt operations, affect safety, damage equipment and cause significant financial, environmental and reputational harm.
OSP Cyber Academy’s IEC 62443 Foundations course provides a clear, practical introduction to the standard and what it means for your organisation, your projects and your responsibilities.
What the Course Covers
Delegates will be introduced to the key principles and requirements of IEC 62443, including:
- The structure and purpose of the IEC 62443 series
- Roles and responsibilities across asset owners, operators, integrators and suppliers
- Developing and maintaining an OT cyber security programme
- Assessing OT risks, threats and vulnerabilities
- Understanding security levels and proportionate controls
- Using zones and conduits to protect industrial systems
- The seven foundational security requirements
- Security awareness, training and organisational competence
- Embedding cyber security into design, procurement and engineering projects
- Managing security throughout the full OT system lifecycle
What You Will Learn
By the end of the course, delegates will be able to:
- Explain the purpose and core principles of IEC 62443
- Understand how OT cyber security differs from traditional IT security
- Recognise their responsibilities within an OT cyber security programme
- Understand risk assessments, security levels, zones and conduits
- Identify where the standard affects engineering and procurement decisions
- Ask more informed questions of suppliers, vendors and system integrators
- Recognise common weaknesses within existing OT environments
- Support practical improvements to their organisation’s cyber resilience
Who Should Attend?
This course is suitable for anyone responsible, accountable or involved in decisions affecting an OT environment, including:
- Senior managers and operational leaders
- Engineering and technical leads
- Site, plant and asset owners
- OT, ICS and automation engineers
- Project managers and project engineers
- OT cyber security professionals
- Systems integrators and service providers
- Vendors, manufacturers and OEMs
- Procurement, commercial and contract teams
- Risk, assurance, compliance and legal professionals
- Health, safety and process-safety team
From the Boardroom to the Control Room
Effective OT cyber security requires more than technical controls. It depends on informed leadership, effective governance, competent people and cooperation across engineering, operations, cyber security, procurement and the supply chain.
This course gives delegates the knowledge and confidence to understand IEC 62443, challenge existing practices and contribute to safer, more secure and more resilient operations.
Trainer Profile
Peter Addison MSc MBA CISSP GICSP
Peter Addison is a Principal Regulatory Cyber Advisor specialising in Operational Technology (OT), Industrial Control Systems (ICS) and the cyber resilience of Critical National Infrastructure (CNI). With over 40 years’ experience across defence, national security, industrial cyber security, engineering governance and regulation, he has worked across the full cyber security lifecycle—from operational delivery through to national policy, regulatory assurance and strategic investment.
Peter was an Enterprise Industrial Security Consultant with Capgemini, where he established and led the Cyber Risk and Information Security (CRIS) capability supporting SSE’s operational businesses. He worked across electricity transmission, generation, renewables and smart metering programmes, leading OT security assurance activities, implementing Azure Defender for IoT, supporting security architecture and helping harmonise IT and OT security standards across complex operational environments. This practical experience provides the industrial context that underpins his approach to IEC 62443.
Earlier in his career, Peter served in the Royal Signals before moving into national security and cyber security roles with GCHQ and CESG (now part of the National Cyber Security Centre). He subsequently held senior consultancy, architecture and assurance roles across government, defence and industry, helping organisations strengthen cyber resilience, governance and security assurance within operational environments.
Peter holds an MSc in Information Security from Royal Holloway, University of London and an MBA in Cyber Security. He also holds internationally recognised professional certifications including CISSP, GICSP, CISM and ISA/IEC 62443 Cyber Security Expert.
Peter has designed and delivered cyber security awareness, governance and technical training for engineers, operational teams, senior managers, regulators and executive leadership. His experience enables him to bring together the perspectives of engineer, consultant, security architect and regulator, helping delegates understand not only how good cyber security is implemented, but also how it is governed, evidenced and assessed within real Critical National Infrastructure environments.
His training combines internationally recognised standards with practical operational experience. Rather than teaching standards in isolation, Peter explains the principles behind them, illustrates them with real-world examples drawn from industrial environments, and encourages delegates to relate the concepts to their own operational responsibilities. This discussion-led approach helps delegates understand not only what IEC 62443 requires, but why those requirements exist and how they can be applied pragmatically to improve the security, safety and resilience of Operational Technology.
