IEC 62443, NIS2 and NERC CIP Compliance

Regulators increasingly expect industrial operators to continuously monitor their OT networks, detect threats quickly and report incidents on time. OT SOC in a Box gives you the monitoring, detection, response and reporting capabilities that IEC 62443, NIS2 and NERC CIP call for — in one packaged unit.

IEC 62443

The international series of standards for securing industrial automation and control systems (IACS).

Live asset inventory of PLCs, RTUs, HMIs and historians to support zone and conduit definition.
Continuous monitoring of traffic between zones to detect unauthorised communication.
Event logging and audit trails supporting system integrity and timely response requirements.
Reports that help evidence security levels and ongoing monitoring to assessors.

NIS2

The EU directive raising cyber security obligations for essential and important entities, including energy, transport, water and manufacturing. The UK equivalent is the NIS Regulations.

Continuous detection to support risk management measures across operational networks.
Prioritised alerts and incident response playbooks to help meet early-warning and incident notification timelines.
Centralised logs and timelines that support incident reporting to authorities.
Board-level reporting to support management accountability.

NERC CIP

The mandatory reliability standards protecting the North American bulk electric system.

Asset discovery supporting BES Cyber System identification and categorisation (CIP-002).
Monitoring of electronic security perimeters and network activity (CIP-005, CIP-007).
Security event logging, alerting and log retention support (CIP-007).
Incident response workflows supporting CIP-008 reporting and response planning.

India — CERT-In Directions

The Indian Computer Emergency Response Team (CERT-In) Directions of April 2022, issued under Section 70B of the IT Act, apply to service providers, intermediaries, data centres and corporate bodies, alongside NCIIPC guidance for critical information infrastructure.

Rapid detection and alerting to support reporting of cyber incidents to CERT-In within 6 hours of noticing them.
Centralised log collection to support the requirement to keep ICT system logs for a rolling 180 days, within India.
Time-synchronised event records, supporting the requirement to sync clocks to NIC or NPL time servers.
Incident timelines and reports that help respond to CERT-In information requests.

UAE — Information Assurance Regulation

The UAE Information Assurance Regulation (formerly the NESA standards) sets security controls for government and critical sector entities, supported by emirate-level frameworks such as the Dubai Electronic Security Center ISR.

Asset inventory and network visibility supporting asset management and risk assessment controls.
Continuous monitoring and anomaly detection supporting security monitoring controls.
Incident response playbooks supporting incident management and reporting obligations.
Sovereign hosting option keeps monitoring data in-country.

Singapore — Cybersecurity Act & CCoP

Singapore's Cybersecurity Act requires owners of Critical Information Infrastructure (CII) to follow the Cyber Security Agency's Cybersecurity Code of Practice (CCoP 2.0), which includes specific OT controls.

Continuous OT monitoring and threat detection supporting CCoP detection requirements.
Prioritised alerts supporting prompt incident notification to the Cyber Security Agency of Singapore.
Asset inventory supporting CII asset identification and risk assessment.
Audit-ready reports to help evidence controls during CSA audits.

China — Cybersecurity Law & MLPS 2.0

China's Cybersecurity Law, the Multi-Level Protection Scheme (MLPS 2.0, GB/T 22239-2019) and the Critical Information Infrastructure Security Protection Regulations set obligations for network operators, including industrial control systems.

Network monitoring and event logging supporting the requirement to retain network logs for at least six months.
Industrial control system monitoring supporting the MLPS 2.0 ICS extension requirements.
Incident detection and response workflows supporting emergency response and reporting duties.
Locally hosted deployment option to keep data within the country.

OT SOC in a Box supports your compliance programme; it does not by itself make an organisation compliant. Full compliance also depends on your policies, processes and governance. See all features and use cases.

Preparing for an audit or new regulation?