<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# IEC 62443 Control Mapping

Mapping NERF OT/ICS security controls to IEC 62443 foundational requirements.

## FR 1: Identification and Authentication
- SL 1: Unique identification for all users
- SL 2: Multifactor authentication for critical access
- SL 3: Hardware-based authentication tokens
- SL 4: Biometric + hardware token for all access

## FR 2: Use Control
- SL 1: Role-based access control
- SL 2: Least privilege with explicit authorization
- SL 3: Dual authorization for critical operations
- SL 4: Automated access review and revocation

## FR 5: Restricted Data Flow
- SL 1: Network segmentation (zones and conduits)
- SL 2: Application-layer filtering between zones
- SL 3: Unidirectional gateways (data diodes)
- SL 4: Full protocol break with content inspection
