/**
 * IEC 62443 Industrial Automation and Control Systems Security Compliance Pack
 *
 * IEC 62443 (formerly ISA-99) -- international multi-part standard family for
 * the cybersecurity of Industrial Automation and Control Systems (IACS).
 * 14 published parts spanning policy, procedures, system design, and product
 * requirements. The standard addresses asset owners, service providers,
 * system integrators, and product suppliers across all OT-connected sectors.
 *
 * Standards referenced (citations only; no verbatim text from the standard):
 *   - IEC 62443-1-1:2009 — Terminology, concepts and models
 *   - IEC 62443-2-1:2010 — Establishing an IACS security program (CSMS)
 *   - IEC 62443-2-2 (draft) — IACS security protection rating
 *   - IEC 62443-2-3:2015 — Patch management in the IACS environment
 *   - IEC 62443-2-4:2015+AMD1:2017 — Security program requirements for
 *     IACS service providers
 *   - IEC 62443-3-2:2020 — Security risk assessment for system design
 *     (zone and conduit model; Security Level Target assignment)
 *   - IEC 62443-3-3:2013 — System security requirements and security levels
 *     (7 Foundational Requirements; Security Level 1-4 controls)
 *   - IEC 62443-4-1:2018 — Secure product development lifecycle (SDL)
 *   - IEC 62443-4-2:2019 — Technical security requirements for IACS
 *     components (component-level security requirements)
 *   - ISA-99 (origin body; ISA/IEC joint sponsorship)
 *   - EU NIS2 Directive (EU) 2022/2555 — Operators of Essential Services (OES)
 *     and Digital Service Providers (DSPs); significant incident notification 24h
 *   - ENISA IACS/OT cybersecurity reference framework (2022)
 *   - NIST SP 800-82 Rev. 3 — Guide to OT Security (US sister standard)
 *   - IEC 61508 — Functional safety of E/E/PE systems (parent SIL standard)
 *   - IECEE CB scheme (product certifications against IEC 62443-4-2)
 *
 * Security Level Classification (IEC 62443-3-2 §5.4 + IEC 62443-3-3 §4):
 *   Security Level Target (SL-T) is assigned per zone/conduit following risk
 *   assessment. Process burden and required controls scale with SL.
 *
 *   | SL | Threat profile                                                   |
 *   |----|------------------------------------------------------------------|
 *   |  1 | Casual / coincidental violation; generic off-the-shelf scanning |
 *   |  2 | Intentional with simple means + low resources; generic IT tools  |
 *   |  3 | Intentional with sophisticated means + IACS skills; targeted OT  |
 *   |  4 | Nation-state actor; Stuxnet-class; extended resources + skills   |
 *
 *   Default when SL not declared: SL 2 (conservative per governance-runtime).
 *
 * Foundational Requirements (FR) — IEC 62443-3-3 §4:
 *   FR 1 — Identification and Authentication Control (IAC)
 *   FR 2 — Use Control (UC)
 *   FR 3 — System Integrity (SI)
 *   FR 4 — Data Confidentiality (DC)
 *   FR 5 — Restricted Data Flow (RDF) — zone + conduit segmentation
 *   FR 6 — Timely Response to Events (TRE)
 *   FR 7 — Resource Availability (RA)
 *
 * Zone and Conduit Model (IEC 62443-3-2 §5.5):
 *   IACS assets are grouped into security zones based on function, risk level,
 *   and required Security Level. Conduits are the controlled communication
 *   paths between zones. The zone/conduit model is the central architecture
 *   artefact for IEC 62443 system security.
 *
 * Key sectors and customers:
 *   Manufacturing — automotive plants, food & beverage, semiconductor fabs
 *   Oil & gas — upstream exploration, midstream pipelines, LNG terminals
 *   Electric utilities — generation, transmission, distribution, smart grid
 *   Water / wastewater — treatment plants, SCADA-controlled distribution
 *   Industrial IoT — connected sensors, edge controllers, OT gateways
 *   System integrators — Rockwell, Schneider Electric, Siemens, Honeywell,
 *                         ABB, Emerson, Yokogawa, Mitsubishi Electric
 *   Product suppliers — IACS component OEMs certifying to IEC 62443-4-2
 *
 * Retention:
 *   IEC 62443-2-1 CSMS documentation: common ICS asset-owner baseline is
 *   7 years (2555 days), aligned with NIS2 Directive records obligations
 *   for Operators of Essential Services (OES). Some sectors (nuclear,
 *   critical infrastructure) impose longer sector-specific periods; this
 *   pack uses the 7-year NIS2 / common ICS baseline.
 *
 * @connexum/ai-governance
 */
import { CompliancePack } from './index';
import { CategoryClassifiers } from '../classification/pack-driven-classifier';
/**
 * IEC 62443 category classifiers.
 *
 * Covers Security Level declarations (SL 1-4), zone and conduit model
 * artefacts, CSMS documentation, and Foundational Requirement control
 * records per IEC 62443-3-3.
 */
export declare const IEC_62443_CATEGORY_CLASSIFIERS: CategoryClassifiers;
/**
 * IEC 62443 Industrial Automation and Control Systems Security Compliance Pack.
 *
 * Pack ID: 'iec-62443'
 * Jurisdiction: International (IEC TC 65; ISA-99 origin; adopted by IECEE CB
 *   scheme, ENISA, NIS2 Directive sectoral guidance for OES/DSP, NIST SP 800-82
 *   US alignment, NERC CIP energy sector overlay, many national regulators).
 *
 * Guard-layer wiring:
 *   - G1-G4 (audit, logging, classification, session): always active
 *   - G5-G6 (supply-chain SDL, approval-queue): SL 2/3/4
 *   - G7-G8 (attestation, anomaly-detection): SL 3/4
 *   - G9 (transparency): SL 4 only (maximum disclosure burden)
 *   - Approval Queue: always active (SL 4/3 immediate; SL 2 anomaly closure)
 *
 * Human-in-loop tier:
 *   - T1: SL 1/2 (OT security engineer review)
 *   - T2: SL 3/4 (TÜV / ISA-certified OT cybersecurity professional)
 */
export declare const IEC_62443_PACK: CompliancePack & {
    categoryClassifiers: CategoryClassifiers;
    subjectKeyedCategories: string[];
};
//# sourceMappingURL=iec-62443.d.ts.map