thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Zones and Conduits

The IEC 62443 segmentation concept that groups assets with common security requirements into zones and controls communications between them through conduits.

Definition

A zone is a logical or physical grouping of assets sharing a target security level; a conduit is the communication path between zones, with its own security controls such as firewalls or data diodes. Risk assessment (62443-3-2) defines zones, conduits and their target security levels.

Example

The safety system is its own zone, connected to the control zone only through a conduit with a dedicated industrial firewall.

Exam tip

Zones group assets; conduits are the controlled channels between them.

Related terms