Endress+Hauser Now Certified for Secure Product Development

A company that aligns its processes with IEC 62443-4-1 must prove that cybersecurity is incorporated throughout the entire life cycle of a product.

Kristen Kazarian, Managing Editor

November 1, 2024

2 Min Read
Endress+Hauser has received the globally recognized IEC 62443-4-1 certification
Endress+Hauser has received the globally recognized IEC 62443-4-1 certification with maturity level 3 for the secure development of products.Endress+Hauser

Endress+Hauser has received the IEC 62443-4-1 certification for the secure development of products, laying a further building block for compliance with the European Cyber Resilience Act.

In October 2024, TÜV Rheinland, the German Technical Inspection Association in the Rhineland region of Germany, certified the secure product development process at Endress+Hauser in accordance with the IEC 62443-4-1 security standard, maturity level 3. Five product centers have received the certification and thus meet the requirements for the life cycle of the products.

Five of the Group’s competence centers were certified: Endress+Hauser Flow, Endress+Hauser Level+Pressure, Endress+Hauser Liquid Analysis, Endress+Hauser Temperature+System Products, and Endress+Hauser Digital Solutions. 

The Council of the European Union passed the Cyber Resilience Act (CRA) in October 2024. This stipulates that products must demonstrate a high level of cybersecurity throughout their entire life cycle. Appropriate measures and methods must be implemented as early as the product development stage. Endress+Hauser follows this “Security by Design” approach to provide customers with the best possible support in protecting their systems. 

“We are particularly proud of this certificate as it recognizes our many years of effort to achieve the highest level of security in our product centers. This level of structured approach across many different development sites shows the importance Endress+Hauser places on cybersecurity,” said Mirko Brcic, Product Security officer at Endress+Hauser.

One visible result of the cybersecurity measures is the development of secure access to Endress+Hauser measuring devices via Bluetooth. Even the internet standardization body IETF now recommends the CPace protocol used in the Endress+Hauser SmartBlue app for password-protected access.

The Standard affects various aspects

In principle, a company that aligns its processes with IEC 62443-4-1 must prove that cybersecurity is incorporated throughout the entire life cycle of a product. As part of the group certification, the certifying body checks the following aspects, among others:

  • Risk and threat analyses

  • Security by design

  • Security testing

  • Vulnerability management

  • Customer security manual

“With the IEC 62443-4-1 certification, we have jointly laid the foundation for supplying secure products in the future and being prepared for regulations such as the CRA,” said Brcic.

About the Author

Kristen Kazarian

Managing Editor

Kristen Kazarian has been a writer and editor for more than three decades. She has worked at several consumer magazines and B2B publications in the fields of food and beverage, packaging, processing, women's interest, local news, health and nutrition, fashion and beauty, automotive, and IT.

Sign up for the Powder & Bulk Solids Weekly newsletter.

You May Also Like