Zone and conduit modelling

Facility segmentation

Divide the facility into zones—groups of equipment with homogeneous security requirements—and conduits connecting zones or external networks. This is the first step because target levels, gaps and measures are all attached to these zones and conduits.

📷 Screenshot to be added img/iec62443-zones-conduits-01.png

What you will do

1. Create one zone for each group of equipment that shares the same functional criticality.
2. Identify the conduits connecting zones to each other and to external networks, including IT, the internet and service providers.
3. Document the main equipment and flows in each zone.