What it is
The framework
- A multi-part series covering IACS security across asset owners, integrators and product suppliers.
- It defines Security Levels (SL 1–4) reflecting resistance to increasingly capable adversaries.
- It is the de-facto expectation for OT/industrial security in many procurement processes.
The hook
Where a red-team result fits
Security levels
SLs express resistance to attacker capability; a measured ASR under defined attack channels is evidence toward a target SL for the policy layer.
What Provael maps to it
Evidence produced
- Adversarial-robustness evidence framed against attacker capability (the SL model).
- A per-channel breakdown mapping to distinct threat vectors.
- Reproducible artifacts an integrator can fold into a 62443-3-3 system assessment.
Timing
Dates (verified 6 Jul 2026)
- Series status
- Actively maintained (multi-part)
Not legal advice; verify the live EUR-Lex/ISO text at launch before relying on these dates.
How to read this mapping
What it is — and isn’t
- adversarial-only — Provael measures adversarial robustness — susceptibility to manipulation — not general accuracy, reliability, or functional safety.
- evidence-not-certification — The output is evidence you file, not a certificate. Provael is not a notified body, a lab, or a certification scheme.
- behavioural-not-worst-case — Attacks are templated and auditable, not gradient- or search-optimised. Results are a floor on susceptibility — a behavioural lower bound, not a certified worst-case bound.
Evidence, not certification
Running Provael does not make a system compliant or certified — it generates measurements you can put into a conformity or assurance file.
Independent project. Not affiliated with or endorsed by ISO, the EU, NIST, IEC, OWASP, or MITRE. Not legal advice.
Clause references are indicative; a wrong clause citation is worse than a missing one.
Turn this into filed evidence.
Download the redacted sample pack, or book an assessment to get the crosswalk filled in for your policy.