IACS

IACS stands for Industrial Automation and Control System. It commonly refers to the integrated set of industrial hardware, software, networks, and supporting infrastructure used to monitor, control, and automate physical manufacturing or process operations.

An IACS typically includes components such as programmable logic controllers (PLCs), distributed control systems (DCS), remote I/O, sensors, actuators, human-machine interfaces (HMIs), engineering workstations, and the industrial networks that connect them. These systems operate at the operational technology (OT) level and interact directly with equipment, utilities, and production lines.

Scope and usage in manufacturing

In industrial and regulated environments, IACS commonly includes:

• Control systems on production lines, packaging systems, and utilities
• Supervisory systems such as SCADA used to monitor plant status
• Industrial communication networks and gateways that connect OT to IT
• Engineering and maintenance workstations used to configure and manage control logic

In operations, IACS is relevant when defining system boundaries for cybersecurity, safety analysis, validation, and integration with higher-level systems such as MES, historian, and ERP. It is also a key scope term in many industrial cybersecurity standards.

Relationship to IEC 62443 and cybersecurity

In the context of IEC 62443, IACS is the central object to be secured. The standard family defines a structured approach to managing cybersecurity for industrial automation and control systems across their lifecycle, including:

• How asset owners define and document IACS scope, zones, and conduits
• Requirements for system integrators when designing and implementing IACS
• Requirements for product suppliers that provide control components within an IACS

Here, IACS is not a single product but the combination of interconnected control assets that enable industrial processes, including hardware, software, and the communication between them.

Common confusion

• IACS vs. ICS: Industrial Control System (ICS) is a broader term that often includes IACS and related control technologies such as SCADA and DCS. In many industrial cybersecurity discussions, IACS and ICS are used nearly interchangeably, but some standards use IACS as the more formal term.
• IACS vs. IT systems: IACS focuses on controlling physical processes at the OT level. Traditional IT systems focus on information processing (e.g., ERP, MES, business applications). Modern plants integrate IACS and IT, but they are managed and risk-assessed differently.