360° security concept for the comprehensive protection of products, solutions, and services
When it comes to data acquisition in PV systems and wind turbine generators, the security of access to the collected data and the transmission paths is also extremely important. In addition to the ever-increasing risk of hacker attacks, there are various legal regulations aimed at protecting your company from cyberattacks. These include the Cyber Resilience Act, the NIS-2 Directive, and the KRITIS Regulation. Currently, there is not a harmonized standard for their implementation. However, it can be assumed that the internationally leading OT security standard IEC 62443 will play a decisive role.
Phoenix Contact has been actively involved in the field of industrial cybersecurity for many years. The company therefore bases its own activities on IEC 62443. A 360° security concept has been developed based on this standard, which covers everything from the security of the products and the design of secure networks through to the training of employees. The key components of the concept have already been certified and endorsed by TÜV as an independent body. These include a secure development process in accordance with IEC 62443-4-1 as well as a selection of devices – such as the PLCnext Control and the FL mGuard security routers – that comply with IEC 62443-4-2. The certifications are supplemented by a blueprint on the subject of remote maintenance in accordance with IEC 62443-3-3 and the design of safe automation solutions in accordance with IEC 62443-2-4. The company's in-house PSIRT team (Product Security Incident Response Team) ensures the rapid handling of vulnerabilities. This ensures comprehensive access security throughout the entire lifecycle of products, solutions, and services.