Model Threats.
Determine Security Levels.
The Asset Owner defines and manages the entire IACS topology. Register every device and conduit, model threats against each, compute FR-based risk indices, and determine target Security Levels — all in a structured, automated workflow aligned to IEC 62443-3-2.
Device & Conduit Registration
Add all IACS assets — PLCs, HMIs, historians, switches, field devices — and all conduits (network connections) between them. Capture IEC 62443 security properties for each asset including zone assignment, criticality, and existing security measures.
Threat & Vulnerability Assessment
For each device and conduit, assess threats across all 7 Foundational Requirements (FR1–FR7). Map threat likelihood and consequence to compute a per-FR risk index — deterministic, not subjective.
Target Security Level Determination
The engine automatically derives the Target Security Level (SL-T) for each zone and conduit based on computed risk scores — fully aligned to IEC 62443-3-2 methodology. No manual SL guesswork.
Control Recommendations
For each device and conduit, receive a mapped set of IEC 62443 security controls required to achieve the Target SL. Know exactly what needs to be implemented — and what gap remains.
Gap Analysis (Coming Soon)
Visual grid mapping current security posture against Target SL requirements across every asset and FR domain. Instantly see what controls are missing and what risks remain open.
Target SL Computed
Threat Assessment
