Phoenix Contact - IEC 62443: Cyber Security for Automation Systems

The industrial automation landscape is changing and is increasingly driven by data and connectivity. With this, Cyber Security is also becoming increasingly important, both because we want it ourselves and because the government is calling us to do so. Indeed, the upcoming European directive on network and information security also imposes obligations on normal commercial and industrial companies.
 

To better protect Europe from cyber attacks, a new European Cyber Security law is coming: the NIS 2. NIS stands for Network and Information Systems Currently, NIS1 is in force this applies to "essential companies", companies that provide essential services to consumers. This is a rather arbitrary concept, but it is now clear that version 2 of this European law is going to apply to many more companies (and also small businesses) regardless of the number of employees employed and that directors of these companies will also be responsible*

In automation, standard IEC 62443 "IT Security for Industrial Automation Systems" plays an extremely important role because it approaches security holistically from the perspective of the operator, system integrator and manufacturer. The more products are developed on long-term in accordance with IEC 62443, the easier it will be for operators and system integrators to implement security when assembling and operating automation systems and to ensure security throughout the life cycle of the installation.
 

Phoenix Contact is the first company to receive certification for a PLCnext controller (open PLC platform) according to "IEC 62443-4-1 ML 3 Full Process Profile" in combination with IEC 62443-4-2. This certificate shows that the secure development lifecycle has been fully applied in the development of the PLCnext Controllers and that the PLCnext controllers meet the required Cyber Security level.

You might also be interested in this: