Complass – Navigate compliance Complass – Navigate compliance

IEC 62443 security level calculator

Which target security level (SL-T) does your zone need? A reasoned suggestion in a few steps. Free, no sign-up, your answers are not stored.

Answer the questions for one zone or conduit. The binding SL-T comes from the risk assessment under IEC 62443-3-2; the calculator gives you a reasoned starting point for it.

Your zone

1. What kind of zone or conduit is it?

Intent

2. What must the zone withstand?

Attacker means and resources

Questions 3 to 6 only apply to intentional attacks (answer “Intentional attacks” in question 2).

3. What means do you expect?
4. How many resources does the attacker have?

Attacker skills and motivation

5. What skills does the attacker have?
6. How high is the motivation?

Impact

7. What would be the worst consequence if the zone is compromised?

Frequently asked questions about the security level calculator

What is a security level?

In IEC 62443, a security level describes the kind of attacker a zone, conduit, system or component protects against, from SL 1 (mistakes) to SL 4 (attackers with extensive resources).

Does the calculator replace the risk assessment?

No. The asset owner sets the SL-T in the risk assessment under IEC 62443-3-2, with threats, impact and tolerable risk per zone. The calculator gives you a reasoned starting point for it.

What is the difference between SL-T, SL-C and SL-A?

SL-T is the target for a zone, SL-C what a system or component can deliver when properly configured, and SL-A what has actually been achieved in the plant.

Why does the calculator ask for four attacker characteristics?

The levels differ by means, resources, skills and motivation. The calculator takes the level that at least two characteristics point to, so a single outlier does not decide the result.

¿Se almacenan mis datos?

No. La evaluación se realiza solo en la memoria de trabajo y no se almacena ni se registra.

Pruebe Complass con sus propios datos

Cree usted mismo su acceso de prueba, con un proyecto de ejemplo por marco normativo si lo desea. Si prefiere que primero le mostremos Complass, solicite una demo.