- November 06, 2020
The manufacturer of the AC500 PLC family has shown that its development processes meet the demands of IT-security.
ABB Automation Products GmbH has achieved certification to IEC 62443-4-1. Awarded by TÜV SÜD, the certification shows that all processes used in development, testing and lifecycle management of the AC500 PLC meet the requirements of IEC 62443-4-1.
The certification is an important milestone for ABB Automation Products, as it ensures that security aspects are given the highest priority at all levels of the company and that it will continue to meet all future requirements and trends.
Achieving the certification involved a team of ABB employees from the PLC factory identifying and improving processes where needed. The project revealed that in many aspects, processes to meet the requirements were already in place.
Ronny Happ, global product management leader for the AC500, said: “Today, the topic of security is very important for suppliers, integrators and customers around the world. This certificate has a major value for customers and end users of ABB when security is required for an application, whatever segment it might be for. With this certificate, ABB demonstrates to customers that all processes used in the AC500 PLC’s development, testing and lifecycle management meet the requirements of IEC 62443-4-1.
“This certificate is also very important for colleagues within ABB Automation Products here in Heidelberg, giving them confidence that the company is determined to develop our products according to the latest processes and techniques.”
The team was supported by external security consultant Prof. Dr. Karl-Heinz Niemann and also worked closely with the certification engineers at TÜV SÜD. “This meant we could reach quite a high rating within a short time,” said Prof. Niemann. “For many of the requirements, ABB Automation Products GmbH scored the highest levels, ML-4 (Maturity Level 4) and ML-3.”
IEC 62443-4-1:2018(E) specifies the process requirements for the secure development of products used in industrial automation and control systems. This specification is part of a series of standards that addresses the issue of security for industrial automation and control systems (IACS). IEC 62443-4-1 defines secure development life-cycle (SDL) requirements related to cyber security for products intended for use in the industrial automation and control systems environment and provides guidance on how to meet the requirements described for each element. The life-cycle description includes security requirements definition, secure design, secure implementation (including coding guidelines), verification and validation, defect management, patch management and product end-of-life. These requirements can be applied to new or existing processes for developing, maintaining and retiring hardware, software or firmware*.
ABB (ABBN: SIX Swiss Ex) is a leading global technology company that energizes the transformation of society and industry to achieve a more productive, sustainable future. By connecting software to its electrification, robotics, automation and motion portfolio, ABB pushes the boundaries of technology to drive performance to new levels. With a history of excellence stretching back more than 130 years, ABB’s success is driven by about 110,000 talented employees in over 100 countries.
Did you enjoy this great article?
Check out our free e-newsletters to read more great articles..Subscribe