Industrial control systems (ICS) depend on highly heterogeneous environments where Linux, proprietary real-time operating systems, and Windows coexist. Although the IEC 62443-3-3 standard provides a comprehensive framework for securing such systems, translating its requirements into concrete configuration checks remains challenging, especially for Windows platforms. In this paper, we propose a transfer learning methodology that maps Windows Common Configuration Enumerations (CCEs) to IEC 62443-3-3 System Security Requirements by leveraging labeled Linux datasets. The resulting labeled dataset enables automated compliance checks, analysis of requirement prevalence, and identification of cross-platform similarities and divergences. Our results highlight the role of CCEs as a bridge between abstract standards and concrete configurations, advancing automation, traceability, and clarity in IEC 62443-3-3 compliance for Windows environments.

翻译：工业控制系统（ICS）依赖于Linux、专有实时操作系统与Windows共存的异构环境。尽管IEC 62443-3-3标准为保护此类系统提供了全面的框架，但将其要求转化为具体的配置检查仍然具有挑战性，尤其对于Windows平台。本文提出一种迁移学习方法，通过利用已标注的Linux数据集，将Windows通用配置枚举（CCEs）映射至IEC 62443-3-3系统安全要求。生成的标注数据集支持自动化合规检查、要求分布分析以及跨平台共性与差异识别。我们的研究结果凸显了CCEs作为抽象标准与具体配置之间桥梁的作用，推动了Windows环境中IEC 62443-3-3合规检查的自动化、可追溯性与清晰度。