TÜV SÜD certificate for Siemens automation products

As the first company to receive TÜV SÜD certification based on IEC 62443-4-1 for the interdisciplinary process of developing Siemens automation and drive products, including industrial software, Siemens received the certification at seven development sites in Germany. Among other things, these sites are developing Simatic S7 industrial controllers, Simatic industrial PCs, Simatic HMI (Human Machine ­Systems ­Interface) devices for operator control and monitoring, and Sinamics drives as well as the TIA (Totally Integrated Automation) Portal engineering software. The international series of standards IEC 62443 defines the security measures for industrial automation systems, with Part 4-1 of the standard describing the requirements of the manufacturer’s development process. 

The TÜV SÜD certificate is based on the standard IEC 62443-4-1 (Secure Product Development Lifecycle Requirements, Draft 3, Edition 10, 01.2016). This standard includes security-relevant requirements such as capabilities and expertise, security of third-party components, process and quality assurance, secure architecture and design, and issue handling as well as security updates, patches and change management. As a leading automation and software supplier for industry, Siemens is continuously improving its products and solutions with regard to industrial security. This also includes the certification based on IEC 62443-4-1. With this achievement, the company is documenting its “Security by Design” approach for automation products and is giving integrators and operators a transparent insight into the IT security measures. Integrators and operators use this for the conception and operation of automation processes and systems using Siemens technology and the “Defense in Depth” protection concept.

To ensure comprehensive protection of industrial plants from internal and external cyber attacks, all levels must be protected simultaneously – ranging from the plant management level to the field level and from access control to copy protection. This is why our approach to comprehensive protection offers defense throughout all levels – “defense in depth”. This concept is according to the recommendations of ISA99/IEC 62443 – the leading standard for security in industrial applications.

www.siemens.com/industrialsecurity

x

Related articles:

Issue 2016-05

Siemens opens Cyber Security Operation Center

Siemens has opened its “Cyber Security Operation ­Center” (CSOC) for the protection of industrial facilities, with a joint location in Lisbon and Munich and one in Milford (Ohio) in the USA....

more
Issue 2017-07-08

Plug & Play for process automation

With the Simatic PCS 7 Plant Automation Accelerator, Siemens is launching a cross-system engineering tool for planners and automation specialists to allow simple, efficient Simatic PCS 7 process...

more
Issue 2011-01-02

Monitoring and controlling plants and machines worldwide

The Siemens Industry Automation Division is expanding its TeleService (remote maintenance/diagnostics) and Tele­control ranges with three new products for remote access by mobile radio (Fig.). The CP...

more
Issue 2015-07-08

Digital Future

To meet the upcoming challenges posed by the Industrie 4.0 vision, Siemens is placing its trust in the Digital Enterprise. “For us, the Digital Enterprise has long since ceased to be just a...

more
Issue 2013-11

Siemens acquires Preactor

By acquiring the Preactor Group headquartered in ­Chippenham in the UK, Siemens further expand its international lead in the industry software market. Preactor’s APS software solutions will add...

more