Overview
IEC TS 63208:2020 - Low‑voltage switchgear and controlgear: Security aspects is a Technical Specification from the IEC that addresses the security‑related main functions of low‑voltage switchgear and controlgear throughout the equipment lifecycle. It covers both wired and wireless data communication and physical accessibility to equipment (within declared environmental limits). The document is intended to raise awareness and provide practical recommendations and requirements for countermeasures against vulnerabilities and threats.
Key topics and requirements
IEC TS 63208 organizes security guidance around lifecycle and technical controls. Major topics include:
- Security objectives - defining what must be protected (availability, integrity, confidentiality) for switchgear and controlgear systems.
- Security lifecycle management - processes for ongoing security including:
- Risk assessment and response planning
- Security requirement specification
- Identification of important data and secure system architecture
- Control system architecture and connectivity levels - classification of exposure and communication layers for embedded devices and assemblies.
- Security requirements for equipment, such as:
- Hardening of devices and assemblies
- Encryption techniques for communication
- Embedded software robustness and integrity (e.g., firmware protection)
- Denial‑of‑service mitigation
- Authentication of users and devices
- Secure communication systems including wireless considerations
- Physical access and environmental controls - recommendations to prevent unauthorized physical access.
- Instructions for installation, operation and maintenance - guidance for secure deployment and lifecycle activities.
- Development and testing - secure development practices and verification/testing methods.
- Informative annexes: cybersecurity/electrical architecture, use‑case studies, basic cybersecurity concepts, and user guidelines.
Applications and who uses it
IEC TS 63208 is practical for organizations and professionals responsible for electrical distribution and control systems, including:
- Manufacturers of low‑voltage switchgear and controlgear
- System integrators and panel builders
- Electrical design and commissioning engineers
- Facility and operations managers responsible for critical power and automation systems
- Cybersecurity teams in industrial, commercial building and manufacturing environments
Use cases include securing firmware updates, protecting communications to remotely monitored switchgear, mitigating DDoS risks from insecure IoT devices, and controlling physical access to electrical equipment.
Related standards
- IEC TC 121 - committee responsible for low‑voltage switchgear and controlgear standards
- IEC 62443 (industrial automation cybersecurity) - complementary guidance for secure industrial control systems
IEC TS 63208 is intended as practical, lifecycle‑oriented guidance to help integrate cybersecurity and physical security into the design, manufacture, installation and maintenance of low‑voltage switchgear and controlgear.