Evaluasi Tingkat Kematangan Keamanan Line Produksi Operational Technology Menggunakan Pendekatan IEC 62443

Abstract

The convergence of Information Technology (IT) and Operational Technology (OT) in modern manufacturing has widened the cyber attack surface of industrial control systems, making security maturity assessment essential. This study evaluates the security matu rity of anOTproductionline(theSlice-IOline)atPT SchneiderElectricManufacturingBatamusing theIEC62443-3-3standard.Astandard-basedsecurityassessmentwasperformedbymapping system controls to the seven Foundational Requirements (FR1-FR7), collecting evidence through documentation review, direct observation, and engineer interviews, scoring each Security Requirement on a 0-3 maturity scale, and comparing the Achieved Security Level (SL-A) against the engineer-claimed Target Security Level SL2 (SL-T). The assessment of 48 requirements shows a strong overall implementation, with an average maturity of 2.84 of 3 (94.7%). Restricted Data Flow (FR5) and Timely Response to Events (FR6) reached full implementation, while Data Confidentiality (FR4) was the weakest area at 80%. Six applicable gaps were identified, all of medium or low priority and dominated by documentation and verification needs rather than missing controls. The results indicate that the production line substantially satisfies the SL2 target, confirming the initial claim, and the study provides prioritized recommendations to consolidate SL2 and progress toward higher security levels.