{"id":6143,"date":"2026-09-20T18:39:21","date_gmt":"2026-09-20T15:39:21","guid":{"rendered":"https:\/\/aesinn.com\/test-ve-olcum-hizmetleri\/iec-62443-endustriyel-otomasyon-ve-kontrol-sistemleri-ot-ics-siber-guvenligi-bilgilendirme-rehberi\/"},"modified":"2026-09-20T18:43:35","modified_gmt":"2026-09-20T15:43:35","slug":"iec-62443-endustriyel-otomasyon-ve-kontrol-sistemleri-ot-ics-siber-guvenligi-bilgilendirme-rehberi","status":"publish","type":"page","link":"https:\/\/aesinn.com\/en\/test-ve-olcum-hizmetleri\/iec-62443-endustriyel-otomasyon-ve-kontrol-sistemleri-ot-ics-siber-guvenligi-bilgilendirme-rehberi\/","title":{"rendered":"IEC 62443 Cybersecurity of Industrial Automation and Control Systems (OT\/ICS): Information Guide"},"content":{"rendered":"<h2 class=\"wp-block-heading\">IEC 62443 Nedir ve Neden Gereklidir?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IEC 62443, end\u00fcstriyel otomasyon ve kontrol sistemlerinin (Industrial Automation and Control Systems &#8211; IACS) siber g\u00fcvenli\u011fini ele alan uluslararas\u0131 standart ailesidir. SCADA, PLC ve DCS gibi operasyonel teknoloji (OT) bile\u015fenlerini i\u015fleten tesislerde, kontrol sistemlerinin siber tehditlere kar\u015f\u0131 korunmas\u0131na y\u00f6nelik risk temelli bir \u00e7er\u00e7eve sunar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sanayide dijitalle\u015fmenin artmas\u0131, fabrika a\u011flar\u0131n\u0131n kurumsal bili\u015fim (IT) a\u011flar\u0131yla ve internetle ba\u011flanmas\u0131, \u00fcretim hatlar\u0131n\u0131 yeni siber tehditlere a\u00e7\u0131k hale getirmi\u015ftir. Bir kontrol sistemine yap\u0131lan sald\u0131r\u0131; \u00fcretim durmas\u0131, \u00fcr\u00fcn kalitesinin bozulmas\u0131, \u00e7evresel zarar veya \u00e7al\u0131\u015fan g\u00fcvenli\u011finin tehlikeye girmesi gibi fiziksel sonu\u00e7lar do\u011furabilir. IEC 62443, bu riskleri sistematik bi\u00e7imde de\u011ferlendirmek ve azaltmak i\u00e7in ortak bir dil ve y\u00f6ntem sa\u011flar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu sayfadaki bilgiler, T\u00fcrk sanayicisine ve ihracat\u00e7\u0131s\u0131na standard\u0131n mant\u0131\u011f\u0131n\u0131 tan\u0131tmak amac\u0131yla haz\u0131rlanm\u0131\u015f genel bir bilgilendirme niteli\u011findedir.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Risk temelli ve seviyelendirilmi\u015f bir yakla\u015f\u0131m sunar<\/li>\n\n\n<li>Sistem i\u015fletenler, entegrat\u00f6rler ve \u00fcr\u00fcn \u00fcreticileri i\u00e7in farkl\u0131 sorumluluklar tan\u0131mlar<\/li>\n\n\n<li>\u00dcretim s\u00fcreklili\u011fi ve tesis g\u00fcvenli\u011fi ile do\u011frudan ili\u015fkilidir<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Standart Ailesinin Yap\u0131s\u0131: D\u00f6rt Katman<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IEC 62443 tek bir belge de\u011fil, birbirini tamamlayan b\u00f6l\u00fcmlerden olu\u015fan bir ailedir. Bu b\u00f6l\u00fcmler d\u00f6rt ana katmana ayr\u0131l\u0131r: genel kavramlar, politikalar ve prosed\u00fcrler, sistem seviyesi gereksinimler ve bile\u015fen seviyesi gereksinimler. Uygulamada en s\u0131k at\u0131f yap\u0131lan b\u00f6l\u00fcmler a\u015fa\u011f\u0131da \u00f6zetlenmi\u015ftir.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>IEC 62443-2-1: Sistemi i\u015fleten kurulu\u015fun kurmas\u0131 gereken IACS siber g\u00fcvenlik y\u00f6netim program\u0131n\u0131 tan\u0131mlar (politikalar, s\u00fcre\u00e7ler ve organizasyonel gereksinimler).<\/li>\n\n\n<li>IEC 62443-3-2: Risk de\u011ferlendirmesi ile sistemin g\u00fcvenlik b\u00f6lgeleri (zone) ve ileti\u015fim kanallar\u0131na (conduit) ayr\u0131lmas\u0131n\u0131 ele al\u0131r.<\/li>\n\n\n<li>IEC 62443-3-3: Sistem seviyesindeki teknik g\u00fcvenlik gereksinimlerini (System Requirements &#8211; SR) ve bunlar\u0131n g\u00fcvenlik seviyeleriyle (SL) ili\u015fkisini tan\u0131mlar.<\/li>\n\n\n<li>IEC 62443-4-1: \u00dcr\u00fcnlerin g\u00fcvenli geli\u015ftirme ya\u015fam d\u00f6ng\u00fcs\u00fc (secure development lifecycle) gereksinimlerini belirler.<\/li>\n\n\n<li>IEC 62443-4-2: Kontrol sistemi bile\u015fenlerinin (cihaz, yaz\u0131l\u0131m, a\u011f bile\u015feni) kar\u015f\u0131lamas\u0131 gereken teknik gereksinimleri tan\u0131mlar.<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Yedi Temel Gereksinim (Foundational Requirements)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IEC 62443&#8217;\u00fcn teknik gereksinimleri, yedi temel gereksinim (Foundational Requirement &#8211; FR) ba\u015fl\u0131\u011f\u0131 alt\u0131nda grupland\u0131r\u0131l\u0131r. Hem sistem seviyesindeki gereksinimler (3-3) hem de bile\u015fen gereksinimleri (4-2) bu yedi ba\u015fl\u0131\u011fa dayan\u0131r. Bir b\u00f6lgenin veya ileti\u015fim kanal\u0131n\u0131n g\u00fcvenlik seviyesi, bu yedi gereksinim i\u00e7in ayr\u0131 ayr\u0131 belirlenen bir vekt\u00f6r olarak ifade edilir.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>FR1 &#8211; Kimlik do\u011frulama ve eri\u015fim kontrol\u00fc (Identification and Authentication Control)<\/li>\n\n\n<li>FR2 &#8211; Kullan\u0131m denetimi (Use Control)<\/li>\n\n\n<li>FR3 &#8211; Sistem b\u00fct\u00fcnl\u00fc\u011f\u00fc (System Integrity)<\/li>\n\n\n<li>FR4 &#8211; Veri gizlili\u011fi (Data Confidentiality)<\/li>\n\n\n<li>FR5 &#8211; K\u0131s\u0131tl\u0131 veri ak\u0131\u015f\u0131 (Restricted Data Flow)<\/li>\n\n\n<li>FR6 &#8211; Olaylara zaman\u0131nda m\u00fcdahale (Timely Response to Events)<\/li>\n\n\n<li>FR7 &#8211; Kaynak eri\u015filebilirli\u011fi (Resource Availability)<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">G\u00fcvenlik Seviyeleri (SL 1-4) Kavram\u0131<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IEC 62443, koruman\u0131n derinli\u011fini d\u00f6rt g\u00fcvenlik seviyesi (Security Level &#8211; SL) ile \u00f6l\u00e7eklendirir. Her seviye, sisteme y\u00f6nelik tehdidin niteli\u011fine g\u00f6re tan\u0131mlan\u0131r; SL 1 en d\u00fc\u015f\u00fck, SL 4 en y\u00fcksek koruma d\u00fczeyini ifade eder. Ama\u00e7, her b\u00f6lge i\u00e7in gere\u011finden az veya gere\u011finden fazla de\u011fil, riske uygun bir koruma seviyesi belirlemektir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Standart ayr\u0131ca farkl\u0131 kavramlar\u0131 birbirinden ay\u0131r\u0131r: hedeflenen g\u00fcvenlik seviyesi (SL-Target), bir bile\u015fenin veya sistemin sa\u011flayabildi\u011fi yetenek seviyesi (SL-Capability) ve sahada fiilen ula\u015f\u0131lan seviye (SL-Achieved). Risk de\u011ferlendirmesi sonucunda belirlenen hedef seviye ile mevcut yetenek aras\u0131ndaki fark, al\u0131nmas\u0131 gereken \u00f6nlemleri ortaya koyar.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>SL 1: Kazara veya tesad\u00fcfi ihlallere kar\u015f\u0131 koruma (\u00f6rne\u011fin bir cihaz\u0131n yanl\u0131\u015f yap\u0131land\u0131r\u0131lmas\u0131)<\/li>\n\n\n<li>SL 2: Basit ara\u00e7lar, d\u00fc\u015f\u00fck kaynak ve genel becerilerle yap\u0131lan kas\u0131tl\u0131 ihlallere kar\u015f\u0131 koruma<\/li>\n\n\n<li>SL 3: Geli\u015fmi\u015f ara\u00e7lar, orta d\u00fczey kaynak ve IACS&#8217;e \u00f6zg\u00fc becerilerle yap\u0131lan kas\u0131tl\u0131 ihlallere kar\u015f\u0131 koruma<\/li>\n\n\n<li>SL 4: Geli\u015fmi\u015f ara\u00e7lar, y\u00fcksek kaynak ve g\u00fc\u00e7l\u00fc motivasyona sahip ileri d\u00fczey sald\u0131rganlara kar\u015f\u0131 koruma<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Zone (B\u00f6lge) ve Conduit (\u0130leti\u015fim Kanal\u0131) Modeli<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IEC 62443&#8217;\u00fcn mimari \u00e7ekirde\u011finde zone ve conduit kavramlar\u0131 yer al\u0131r. B\u00f6lge (zone), ortak g\u00fcvenlik gereksinimlerine sahip olan; i\u015flevsel, mant\u0131ksal veya fiziksel olarak ili\u015fkili varl\u0131klar\u0131n bir arada gruplanmas\u0131d\u0131r. \u0130leti\u015fim kanal\u0131 (conduit) ise iki veya daha fazla b\u00f6lge aras\u0131ndaki ileti\u015fim kanallar\u0131n\u0131n mant\u0131ksal ya da fiziksel gruplanmas\u0131d\u0131r ve b\u00f6lgeler aras\u0131 veri ak\u0131\u015f\u0131n\u0131 ta\u015f\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">IEC 62443-3-2, sistemin bu b\u00f6lge ve kanallara ayr\u0131lmas\u0131n\u0131 bir risk de\u011ferlendirme s\u00fcreci \u00fczerinden ele al\u0131r. Sistem \u00f6nce inceleme kapsam\u0131na al\u0131n\u0131r (system under consideration), y\u00fcksek seviyeli bir risk de\u011ferlendirmesi yap\u0131l\u0131r, ard\u0131ndan sistem b\u00f6lgelere ve kanallara b\u00f6l\u00fcn\u00fcr. Her b\u00f6lge ve kanal i\u00e7in ayr\u0131nt\u0131l\u0131 risk de\u011ferlendirmesi yap\u0131l\u0131r; sald\u0131r\u0131 olas\u0131l\u0131\u011f\u0131 ve etkisi de\u011ferlendirilerek her biri i\u00e7in bir hedef g\u00fcvenlik seviyesi (SL-Target) belirlenir. Bu yakla\u015f\u0131m, kritik b\u00f6lgeleri yal\u0131tarak bir b\u00f6lgede olu\u015fabilecek ihlalin t\u00fcm sisteme yay\u0131lmas\u0131n\u0131 s\u0131n\u0131rlamay\u0131 ama\u00e7lar.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>\u0130nceleme kapsam\u0131n\u0131n ve y\u00fcksek seviyeli riskin belirlenmesi<\/li>\n\n\n<li>Sistemin b\u00f6lgelere (zone) ve ileti\u015fim kanallar\u0131na (conduit) ayr\u0131lmas\u0131<\/li>\n\n\n<li>Her b\u00f6lge\/kanal i\u00e7in ayr\u0131nt\u0131l\u0131 risk de\u011ferlendirmesi ve hedef g\u00fcvenlik seviyesinin atanmas\u0131<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">IT G\u00fcvenli\u011fi ile OT G\u00fcvenli\u011fi Aras\u0131ndaki Fark<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kurumsal bili\u015fim (IT) g\u00fcvenli\u011finde \u00f6ncelik genellikle verinin gizlili\u011fidir; e-posta, veri taban\u0131 ve dosya sistemlerinin korunmas\u0131 \u00f6n plandad\u0131r. Operasyonel teknoloji (OT) taraf\u0131nda ise \u00f6ncelik s\u0131ralamas\u0131 de\u011fi\u015fir: s\u00fcrekli \u00e7al\u0131\u015fabilirlik ve fiziksel s\u00fcrecin b\u00fct\u00fcnl\u00fc\u011f\u00fc, \u00e7o\u011fu durumda gizlilikten \u00f6nce gelir. Bir \u00fcretim hatt\u0131n\u0131n beklenmedik \u015fekilde durmas\u0131, bir veri s\u0131z\u0131nt\u0131s\u0131ndan daha b\u00fcy\u00fck ve ani sonu\u00e7lar do\u011furabilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OT ortamlar\u0131nda uzun \u00f6m\u00fcrl\u00fc ekipmanlar, y\u0131llarca g\u00fcncellenmeden \u00e7al\u0131\u015fan denetleyiciler ve ger\u00e7ek zamanl\u0131 \u00e7al\u0131\u015fma gereksinimleri bulunur. Bu nedenle IT d\u00fcnyas\u0131nda rutin say\u0131lan yama uygulama veya yeniden ba\u015flatma gibi i\u015flemler, OT&#8217;de dikkatle planlanmal\u0131d\u0131r. IEC 62443, tam da bu farkl\u0131l\u0131klar\u0131 g\u00f6z \u00f6n\u00fcne alarak OT\/ICS ortamlar\u0131na \u00f6zg\u00fc bir g\u00fcvenlik \u00e7er\u00e7evesi sunar; IT i\u00e7in geli\u015ftirilmi\u015f genel yakla\u015f\u0131mlar\u0131n do\u011frudan kopyalanmas\u0131n\u0131n yeterli olmad\u0131\u011f\u0131n\u0131 kabul eder.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>OT&#8217;de \u00f6ncelik \u00e7o\u011funlukla eri\u015filebilirlik ve s\u00fcre\u00e7 b\u00fct\u00fcnl\u00fc\u011f\u00fcd\u00fcr<\/li>\n\n\n<li>Uzun \u00f6m\u00fcrl\u00fc ekipman ve ger\u00e7ek zamanl\u0131 \u00e7al\u0131\u015fma \u00f6zel yakla\u015f\u0131m gerektirir<\/li>\n\n\n<li>IEC 62443, OT\/ICS&#8217;e \u00f6zg\u00fc risk ve k\u0131s\u0131tlar\u0131 temel al\u0131r<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">AB Makine T\u00fcz\u00fc\u011f\u00fc ve Siber Dayan\u0131kl\u0131l\u0131k Yasas\u0131 (CRA) ile \u0130li\u015fkisi<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Avrupa Birli\u011fi&#8217;nin yeni d\u00fczenlemeleri, siber g\u00fcvenli\u011fi \u00fcr\u00fcn ve makine mevzuat\u0131n\u0131n bir par\u00e7as\u0131 haline getirmektedir. AB Makine T\u00fcz\u00fc\u011f\u00fc (EU) 2023\/1230, makinelerde g\u00fcvenlik ile ilgili kontrol sistemlerinin d\u0131\u015far\u0131dan yap\u0131labilecek k\u00f6t\u00fc niyetli m\u00fcdahalelere kar\u015f\u0131 korunmas\u0131n\u0131 gerektiren h\u00fck\u00fcmler i\u00e7erir. Bu, makine g\u00fcvenli\u011finin art\u0131k siber g\u00fcvenlikten ayr\u0131 d\u00fc\u015f\u00fcn\u00fclemeyece\u011fi anlam\u0131na gelir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Siber Dayan\u0131kl\u0131l\u0131k Yasas\u0131 olarak bilinen CRA (EU) 2024\/2847 ise dijital unsur ta\u015f\u0131yan \u00fcr\u00fcnler i\u00e7in siber g\u00fcvenlik gereksinimleri getirir; \u00fcr\u00fcnlerin g\u00fcvenli tasarlanmas\u0131, g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n y\u00f6netimi ve ya\u015fam d\u00f6ng\u00fcs\u00fc boyunca g\u00fcncelleme sa\u011flanmas\u0131 gibi y\u00fck\u00fcml\u00fcl\u00fckler \u00f6ng\u00f6r\u00fcr. IEC 62443&#8217;\u00fcn g\u00fcvenli \u00fcr\u00fcn geli\u015ftirme (4-1) ve bile\u015fen gereksinimleri (4-2) b\u00f6l\u00fcmleri, bu d\u00fczenlemelerin bekledi\u011fi m\u00fchendislik pratiklerini uygulamaya d\u00f6kmede sanayiciye yol g\u00f6sterici bir referans \u00e7er\u00e7eve olarak de\u011ferlendirilebilir. Bu ili\u015fkinin somut kapsam\u0131, \u00fcr\u00fcne ve pazara g\u00f6re yetkili m\u00fchendis de\u011ferlendirmesiyle ele al\u0131nmal\u0131d\u0131r.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>AB Makine T\u00fcz\u00fc\u011f\u00fc (EU) 2023\/1230: makine kontrol sistemlerinin k\u00f6t\u00fc niyetli m\u00fcdahaleye kar\u015f\u0131 korunmas\u0131<\/li>\n\n\n<li>CRA (EU) 2024\/2847: dijital unsur ta\u015f\u0131yan \u00fcr\u00fcnler i\u00e7in siber g\u00fcvenlik y\u00fck\u00fcml\u00fcl\u00fckleri<\/li>\n\n\n<li>IEC 62443, bu d\u00fczenlemelerin bekledi\u011fi m\u00fchendislik pratikleri i\u00e7in referans \u00e7er\u00e7eve sa\u011flar<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Kimler \u0130\u00e7in Gereklidir? (Roller ve Kapsam)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IEC 62443, siber g\u00fcvenli\u011fi payla\u015f\u0131lan bir sorumluluk olarak ele al\u0131r ve tedarik zincirindeki farkl\u0131 taraflara farkl\u0131 g\u00f6revler y\u00fckler. SCADA, PLC veya DCS i\u015fleten fabrikalar, enerji ve altyap\u0131 tesisleri, s\u00fcre\u00e7 end\u00fcstrileri ve otomasyon \u00e7\u00f6z\u00fcmleri sa\u011flayan kurulu\u015flar bu standard\u0131n do\u011frudan muhatab\u0131d\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Standart \u00fc\u00e7 temel rol tan\u0131mlar: sistemi i\u015fleten kurulu\u015f (asset owner), otomasyon \u00e7\u00f6z\u00fcm\u00fcn\u00fc tasarlay\u0131p devreye alan sistem entegrat\u00f6r\u00fc (system integrator) ve kontrol bile\u015fenlerini \u00fcreten \u00fcr\u00fcn tedarik\u00e7isi (product supplier). Her rol\u00fcn y\u00fck\u00fcml\u00fcl\u00fckleri farkl\u0131d\u0131r; \u00f6rne\u011fin i\u015fleten kurulu\u015f risk de\u011ferlendirmesinden ve hedef g\u00fcvenlik seviyelerinin belirlenmesinden, \u00fcr\u00fcn tedarik\u00e7isi ise g\u00fcvenli tasar\u0131mdan sorumludur.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Sistemi i\u015fleten kurulu\u015f (asset owner): risk de\u011ferlendirmesi, hedef g\u00fcvenlik seviyeleri ve i\u015fletme g\u00fcvenli\u011fi<\/li>\n\n\n<li>Sistem entegrat\u00f6r\u00fc (system integrator): tasar\u0131m, kurulum, yap\u0131land\u0131rma, test ve devreye alma<\/li>\n\n\n<li>\u00dcr\u00fcn tedarik\u00e7isi (product supplier): g\u00fcvenli tasarlanm\u0131\u015f bile\u015fen ve yaz\u0131l\u0131mlar\u0131n geli\u015ftirilmesi<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">AES Kapsam\u0131 ve Bilgilendirme Notu<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AES, T\u00dcRKAK akrediteli A tipi bir muayene kurulu\u015fu olup akreditasyon kapsam\u0131 yaln\u0131zca &#8220;6.1 Elektrik Tesisat\u0131&#8221; alan\u0131 ile s\u0131n\u0131rl\u0131d\u0131r. Bu sayfadaki IEC 62443 i\u00e7eri\u011fi, bu akreditasyon kapsam\u0131n\u0131n d\u0131\u015f\u0131nda kalan konularda genel bir fark\u0131ndal\u0131k olu\u015fturmak \u00fczere haz\u0131rlanm\u0131\u015ft\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AES bir Onaylanm\u0131\u015f Kurulu\u015f (Notified Body) veya belgelendirme kurulu\u015fu DE\u011e\u0130LD\u0130R; IEC 62443 uygunluk\/belgelendirmesi d\u00fczenlemez. Bu sayfadaki i\u00e7erik bilgilendirme ama\u00e7l\u0131d\u0131r ve yetkili m\u00fchendis teknik de\u011ferlendirmesi \u00e7er\u00e7evesindedir. Kurulu\u015funuzun IEC 62443 kapsam\u0131ndaki ihtiya\u00e7lar\u0131, tesisinizin \u00f6zel ko\u015fullar\u0131na g\u00f6re yetkili m\u00fchendis taraf\u0131ndan de\u011ferlendirilmelidir.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>AES yaln\u0131zca &#8220;6.1 Elektrik Tesisat\u0131&#8221; kapsam\u0131nda akreditedir<\/li>\n\n\n<li>AES, IEC 62443 belgelendirmesi veya uygunluk de\u011ferlendirmesi yapmaz<\/li>\n\n\n<li>Sunulan bilgiler yetkili m\u00fchendis de\u011ferlendirmesinin yerini tutmaz<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Related Services<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><a href=\"https:\/\/aesinn.com\/en\/test-ve-olcum-hizmetleri\/fonksiyonel-guvenlik-ve-sil-dogrulama-iec-61508-iec-61511\/\">Fonksiyonel G\u00fcvenlik ve SIL Do\u011frulama (IEC 61508 \/ 61511)<\/a><\/li>\n\n\n<li><a href=\"https:\/\/aesinn.com\/en\/muayene-periyodik-kontrol\/mekanik-ekipman-muayeneleri\/makine-ce-uygunlugu-risk-degerlendirmesi-ve-teknik-dosya-danismanligi\/\">Makine CE Uygunlu\u011fu ve Teknik Dosya Dan\u0131\u015fmanl\u0131\u011f\u0131<\/a><\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Frequently Asked Questions<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">IEC 62443 hangi sistemleri kapsar?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Standart, end\u00fcstriyel otomasyon ve kontrol sistemlerini (IACS) kapsar. Uygulamada SCADA, PLC ve DCS gibi bile\u015fenlerle \u00e7al\u0131\u015fan \u00fcretim tesisleri, enerji ve altyap\u0131 sistemleri ile s\u00fcre\u00e7 end\u00fcstrileri bu kapsam\u0131n i\u00e7inde yer al\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">G\u00fcvenlik seviyeleri (SL 1-4) neyi ifade eder?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">SL 1&#8217;den SL 4&#8217;e do\u011fru artan bir koruma \u00f6l\u00e7e\u011fidir. SL 1 kazara ihlallere, SL 2 basit ara\u00e7larla yap\u0131lan kas\u0131tl\u0131 ihlallere, SL 3 geli\u015fmi\u015f ve IACS&#8217;e \u00f6zg\u00fc becerilerle yap\u0131lan sald\u0131r\u0131lara, SL 4 ise y\u00fcksek kaynakl\u0131 ve ileri d\u00fczey sald\u0131rganlara kar\u015f\u0131 korumay\u0131 hedefler.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Zone ve conduit ne anlama gelir?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Zone (b\u00f6lge), ortak g\u00fcvenlik gereksinimlerine sahip varl\u0131klar\u0131n bir arada gruplanmas\u0131d\u0131r. Conduit (ileti\u015fim kanal\u0131) ise iki veya daha fazla b\u00f6lge aras\u0131ndaki ileti\u015fimi ta\u015f\u0131yan kanallar\u0131n gruplanmas\u0131d\u0131r. Bu model, kritik b\u00f6lgeleri yal\u0131tarak bir ihlalin t\u00fcm sisteme yay\u0131lmas\u0131n\u0131 s\u0131n\u0131rlamay\u0131 ama\u00e7lar.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">IEC 62443 ile IT siber g\u00fcvenli\u011fi ayn\u0131 \u015fey midir?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Hay\u0131r. IT g\u00fcvenli\u011finde genellikle veri gizlili\u011fi \u00f6nceliklidir; OT\/ICS ortamlar\u0131nda ise s\u00fcrekli \u00e7al\u0131\u015fabilirlik ve fiziksel s\u00fcrecin b\u00fct\u00fcnl\u00fc\u011f\u00fc \u00e7o\u011fu durumda \u00f6ne \u00e7\u0131kar. IEC 62443, OT&#8217;ye \u00f6zg\u00fc bu \u00f6ncelikleri ve k\u0131s\u0131tlar\u0131 temel alarak tasarlanm\u0131\u015ft\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">IEC 62443&#8217;\u00fcn AB Makine T\u00fcz\u00fc\u011f\u00fc ve CRA ile ili\u015fkisi nedir?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">AB Makine T\u00fcz\u00fc\u011f\u00fc (EU) 2023\/1230 makine kontrol sistemlerinin k\u00f6t\u00fc niyetli m\u00fcdahaleye kar\u015f\u0131 korunmas\u0131n\u0131, CRA (EU) 2024\/2847 ise dijital unsur ta\u015f\u0131yan \u00fcr\u00fcnler i\u00e7in siber g\u00fcvenlik y\u00fck\u00fcml\u00fcl\u00fcklerini getirir. IEC 62443, bu d\u00fczenlemelerin bekledi\u011fi m\u00fchendislik pratikleri i\u00e7in yayg\u0131n kabul g\u00f6ren bir referans \u00e7er\u00e7eve olarak de\u011ferlendirilebilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">AES IEC 62443 belgesi d\u00fczenler mi?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Hay\u0131r. AES bir Onaylanm\u0131\u015f Kurulu\u015f veya belgelendirme kurulu\u015fu de\u011fildir ve IEC 62443 uygunluk\/belgelendirmesi d\u00fczenlemez. AES yaln\u0131zca &#8220;6.1 Elektrik Tesisat\u0131&#8221; kapsam\u0131nda T\u00dcRKAK akreditelidir. Bu sayfadaki i\u00e7erik bilgilendirme ama\u00e7l\u0131d\u0131r ve yetkili m\u00fchendis teknik de\u011ferlendirmesi \u00e7er\u00e7evesindedir.<\/p>","protected":false},"excerpt":{"rendered":"<p>IEC 62443, end\u00fcstriyel otomasyon ve kontrol sistemlerinin (OT\/ICS) siber g\u00fcvenli\u011fini y\u00f6neten uluslararas\u0131 standart ailesidir. Bu sayfa, standard\u0131n yap\u0131s\u0131n\u0131, g\u00fcvenlik seviyelerini ve mevzuatla ili\u015fkisini sanayiciye y\u00f6nelik olarak bilgilendirme amac\u0131yla a\u00e7\u0131klar.<\/p>","protected":false},"author":1,"featured_media":6146,"parent":2518,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kadence_starter_templates_imported_post":false,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","slim_seo":{"title":"What is IEC 62443? OT\/ICS Cybersecurity Guide","description":"This is an information guide for industrialists on the IEC 62443 standard family, security levels (SL 1-4), zone\/conduit model, and OT\/ICS cybersecurity."},"_pplb_hide_from_list":false,"footnotes":""},"class_list":["post-6143","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"taxonomy_info":[],"featured_image_src_large":["https:\/\/aesinn.com\/wp-content\/uploads\/iec62443-aes-kart-1024x1024.png",1024,1024,true],"author_info":{"display_name":"Emre Metin","author_link":"https:\/\/aesinn.com\/en\/author\/yonetim\/"},"comment_info":"","_hostinger_reach_plugin_has_subscription_block":false,"_hostinger_reach_plugin_is_elementor":false,"_links":{"self":[{"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/pages\/6143","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/comments?post=6143"}],"version-history":[{"count":2,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/pages\/6143\/revisions"}],"predecessor-version":[{"id":6152,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/pages\/6143\/revisions\/6152"}],"up":[{"embeddable":true,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/pages\/2518"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/media\/6146"}],"wp:attachment":[{"href":"https:\/\/aesinn.com\/en\/wp-json\/wp\/v2\/media?parent=6143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}