IEC 62443 Libraries

Reference data reusable from one project to another: catalogues of equipment, vulnerabilities, measures, and normative frameworks.

The module's seven libraries

Library	Content	Used in	Family
1 — Assets	Typical equipment: PLCs, servers, network equipment, sensors	ZCR 1	EBIOS
2 — Business values	Essential functions and services, with their security needs	ZCR 1, ZCR 2	EBIOS
3 — ZCR1: Infrastructure	User roles, types of access points and networks	ZCR 1	IEC 62443
4 — ZCR5: Risk analysis	Vulnerabilities, countermeasures, threats and sources, attack vectors	ZCR 5	IEC 62443
5 — SR/CR Requirements	Normative catalogues 3-3 (system) and 4-2 (component), read-only	ZCR 1 (SL-C derivation), ZCR 6	IEC 62443
6 — MITRE ATT&CK for ICS	Attack techniques from the MITRE framework adapted for industrial use	ZCR 5	EBIOS
7 — ORG Measures	Organisational and governance measures	ZCR 6	IEC 62443

Shared families

Assets, business values and MITRE techniques belong to the EBIOS family, shared with the EBIOS RM module. Two libraries from the same family are saved together and follow the same source setting.

Choosing the source

Each library has a source: the application's default values, your custom library, or that of a group you belong to.

• The source is chosen per family, not per library.
• Only the project owner sets the source. A collaborator receives the copy through the normal sync.

Copy into the project

When a project is opened, the library of the chosen source is copied into the project. Changes made afterwards only affect that project and are saved automatically.

The copy is frozen

A library modified afterwards on the server side does not propagate to projects that already copied it. This is deliberate: an analysis must remain identically reproducible.

Saving for reuse elsewhere

To reuse your libraries in other projects or share them with a group, save them as a pack from the Backup page. This is the only way — there is no save button on the library pages. See Library packs.