ZCR6 — CRS document
ZCR 6 consolidates the entire analysis into the CRS document (Cybersecurity Requirements Specification) required by the standard IEC 62443-3-2 (§4.7.2): 9 numbered sections, from the SUC description to regulatory requirements, exportable to Word.
Toolbar
| Button | Function |
|---|---|
| ⬇ Export CRS | Generates the Word document |
| Grid | Shows/hides cell borders |
| 🎬 UI test (dev mode) | Replays a demo scenario |
A status badge (Draft / In review / Approved / Archived) and a progress bar (% of sections completed) are shown in the header.
The 9 sections
6.1 CRS Metadata
Document title, Version, Date, Status, Author(s), Approver(s), Scope, Document purpose, Related documents. A checklist reminds you of the expected minimum content (sections 6.2 to 6.9).
6.2 SUC Description
SUC name, high-level description, function and intended use, equipment or process under control, SUC boundaries, reference to the diagram.
6.3 Zone and Conduit Drawings
Read-only import of the zones and conduits defined in ZCR3, with a direct link to that page.
6.4 Zone and Conduit Characteristics
For each zone/conduit, the normative fields (a) to (n): responsible organization, SIS designation, logical/physical boundary, logical and physical access points, data flows (Source/Destination/Protocol/Description table), connected zones/conduits, applicable requirements and policies, assumptions and external dependencies.
6.5 Operating Environment Assumptions
Two columns — Physical environment / Logical environment — each with a list of assumptions (description + document reference).
6.6 Threat Environment
General description of the threat environment, threat intelligence sources, then two columns Current threats / Emerging threats (label, source, description).
6.7 Organizational Security Policies
List of policies: title, type, description/associated countermeasures, scope of application, internal reference.
6.8 Tolerable Risk
Global threshold imported read-only from ZCR4, description and justification of the tolerable risk, then a Initial risks vs. tolerable threshold table (feared event, type, V, G, computed risk, threshold, Acceptable/Detailed analysis required status).
6.9 Regulatory Requirements
Editable table of regulatory requirements: regulation/standard, article/section, requirement, applicability, status. + Common templates button to pre-fill common regulations.
A living document
The completion percentage (% complete) follows the sections marked as finished — useful for tracking the progress of the CRS drafting before export.
Links with the other ZCRs
Section 6.3/6.4 carries over ZCR3, section 6.8 carries over ZCR4. The full content of ZCR5 (detailed scenarios) is carried over separately in the CRS Report (/iec62443/rapport), not directly in this data-entry page.