Lifecycle
Page of the optional "Lifecycle" profile (IEC 62443-2-3). It covers the installation's life after commissioning, where the risk analysis stops at design.
Page hidden by default
It only appears if the "Lifecycle" toggle is enabled in the Configuration tab of the Context page. The profile is independent from the "SIS Analysis" profile.
Enable it if the study needs to be maintained over time: installation in operation, ongoing monitoring commitment, periodic revalidation requirement.
"Life records" tab
One record per equipment, following the IAONA model. It covers in particular: firmware and version, application file and configuration, backup/replacement procedures, external interfaces (ports, USB), protocols, connected equipment, behaviour on power loss or communication loss, disabled services, firmware signatures (SHA-256), authentication and ACL, compliance and certificates (62443-4, CSPN), and three indicators: firmware update possible, remote access enabled, logging active.
Records only cover equipment of type Hardware from the ZCR 1 inventory. A ● dot marks a record already filled in.
"Commissioning" tab
Three acceptance checklists, each control point having a status (Compliant / Non-compliant / Not applicable) and evidence (test report, report, fingerprint):
| Checklist | Purpose |
|---|---|
| CFAT | Cybersecurity Factory Acceptance Test |
| CSAT | Cybersecurity Site Acceptance Test |
| PSSR | Pre-Startup Safety Review (FSA/CSA step 3) |
"Operation" tab
Periodic SL-A evaluations — one evaluation per zone or conduit, dated, based on the factors of IEC 62443-1-1 §5.10.3 (countermeasure degradation, audits, communicating neighbouring zones…). A badge flags cases where SL-A < SL-T, which call for an action plan.
Patch & alert register (IEC 62443-2-3) — one entry per CERT or vendor advisory and per patch release: title/CVE, asset or zone concerned, source, status, decision (immediate, next shutdown, mitigation…) and owner.
Document output
These tables are output in the Word report via the "Appendix – SIS mode & lifecycle" section, to be enabled in the report editor.