Overview
IEC TR 63069:2019 - Industrial-process measurement, control and automation - Framework for functional safety and security - is a Technical Report from IEC TC 65 that explains and provides guidance on the combined application of IEC 61508 (functional safety) and IEC 62443 (cybersecurity for industrial automation and control systems, IACS). The report helps practitioners understand how safety and security interact in connected industrial systems and offers a framework for co-engineering both disciplines across the system life cycle.
Key topics and technical requirements
This TR is guidance-focused (not a prescriptive standard) and covers these principal areas:
- Scope and purpose
- Guidance for common application of IEC 61508 and IEC 62443 in industrial-process measurement, control and automation; applicable to other sectors using these series.
- Terminology
- Clarifies and reconciles differing definitions of safety, security, and risk to support consistent usage across both domains.
- Context and interaction
- Describes the safety domain and security domain, their interactions, and the concept of a security environment for IACS.
- Guiding principles
- High-level principles for integrating functional safety and cybersecurity activities.
- Life-cycle recommendations for co-engineering
- Recommended activities and responsibilities across design, implementation, operation and maintenance to ensure safety and security are managed together.
- Risk assessment considerations
- Integrating safety risk and threat-risk (security) assessments, trade-off analysis, identifying vulnerabilities and root causes, and managing reasonably foreseeable misuse and malevolent actions.
- Incident response and handling
- Readiness and procedures for detecting, reporting, responding to and learning from security incidents that may impact safety.
Practical applications and who uses it
IEC TR 63069:2019 is intended for a wide industrial audience involved in complex, connected control systems:
- Asset owners and plant operators - governance, procurement and operations planning.
- System integrators and product suppliers - design and implementation of IACS.
- Service providers - maintenance, updates and incident response.
- Regulators and assessors - audit and conformity considerations.
Use cases include combining safety instrumented systems with networked control systems, assessing how cybersecurity vulnerabilities could affect safety functions, and planning co-engineered life-cycle activities to reduce combined risk.
Related standards
- IEC 61508 (all parts) - Functional safety of E/E/PE safety-related systems.
- IEC 62443 (all parts) - Security for industrial automation and control systems.
- ISO/IEC incident management references are also cited for incident handling terminology.
Keywords: IEC TR 63069:2019, functional safety, IEC 61508, IEC 62443, industrial automation, IACS, cybersecurity, risk assessment, incident response, co-engineering.