Walls, Watchers and Spare Parts: IEC 62443-3-3 Part Two — FR5 to FR7, Compensating Countermeasures, Remote Access and Colonial Pipeline

Deep End Era. Engineering with Sankalp · Oct 28, 2026 · 54m

Diego Ferreira and Leila Nasser walk the train five network from the field I/O to the corporate firewall, then spend a night shift in the security operations room. Along the way: a firewall rule called TEMP-ALLOW-ALL, a backup that had never been restored, a pipeline shut down not because its control system was attacked but because its billing system was, and the remote access design that came out of it. Part ten of The Deep End's 62443 series.

Chapters

00:00:00 Cold open: five in the morning

00:03:22 FR5: restricted data flow

00:11:52 FR6: timely response to events

00:14:55 FR7: resource…