Under the wave of Industry 4.0, network devices and facilities along with systems in a factory will be more intensively connected, whereas the production capacity of a factory has been expanded through data analysis. Industry 4.0 has gradually rendered the conventionally closed environment to an open horizon, but it has also caused concern over the cybersecurity of a factory. In particular, as the data transmission and use of data at respective connection points became more and more complicated, it is more likely to have security flaws as a result of the lack of thorough considerations or negligence, which can be the potential weak points for hackers to attack. 

To design a set of criteria which can meet the demand of customers, markets and statutory laws and regulations for secure development of connected product, Delta has specifically selected the international standards IEC62443 security for industrial automation and control systems. Different from the conventional secure development lifecycle which only puts focus on the development phase, the standards address the cybersecurity of the whole product life cycle of components and systems. Thus, certification of IEC62443 is the indicator for Delta to demonstrate its capability to implement quality assurance in the global market, and it is also an important milestone for Delta to further provide its customers with assurance, faith and sustainable operation.

Delta obtains its first certification of international standard IEC62443-4-1 for cybersecurity

The way that Delta could smoothly obtain its first certification of international standard IEC62443-4-1 Security for industrial automation and control system of the IECEE system has mainly relied on the full support from the Delta workforce, in which the cyber security experts, including the experts in the fields of IABG, ICTBG and EISBG, the SCP team as the major taskforce responsible for soft and firmware integration, and CPSS3C (Cyber-Physical System Security Solution & Service, which is the main undertaking of Delta’s product security Center), jointly designed the guidelines suitable for Delta’s security development lifecycle process. At the same time, educational training was also completed during the project period, for which a total of 45 colleagues received the IEC62443 training course provided by TUV NORD. Furthermore, to reduce the difficulty in future introduction and make it easy to adapt to varying workforces and products, Delta was regarded as the mainstay for the process certification this time, which successfully shortened the scheduled duration to garner the certification from one year to six months. 

The IEC62443-4-1 certification issued by IECEE CB Testing Laboratory of TUV NORD, the only certification body acknowledged by IEC62443 in the Asian region, represents that the development of Delta’s industrial automation and infrastructural facilities related products will be more well-rounded in terms of the mechanisms either in component security or control system security. Delta will also continue its commitment to reinforcing product security and quality, and build up customer trust on its products throughout the world.