Certification of this section of the standard demonstrates that the manufacturer has taken the issue of security into account from the product definition to the "End of Life Declaration" as part of a process. Certification by TÜV NORD CERT means that the elevator manufacturer can now demonstrate a secure product development process in accordance with IEC 62443-4-1.
Networked industrial plants bring many advantages, but also harbor dangers. If cyber criminals manage to gain access, they can sometimes put entire industrial plants out of operation. The IEC 62443 standard was developed with the aim of increasing IT security within the process and automation industry and has established itself as an international standard for cybersecurity in industrial automation. Part 4-1 of the standard contains life cycle requirements for secure product development.
TK Elevator is aware that IT security can only be achieved if it is incorporated throughout the entire product life cycle and has therefore had the security of its product development life cycle (PDLC) tested by TÜViT. TÜViT's first step was to carry out a gap analysis with the objective of evaluating the completeness of the existing PDLC. The focus was on requirements that are placed on the secure development of products, such as the development, maintenance and decommissioning of hardware, software or firmware, as well as secure implementation and patch management. This is to ensure that potential vulnerabilities of systems or individual components can be identified and addressed within the life cycle. The security documentation and the security strategy, which defines information such as scope, roles and responsibilities with regard to the product life cycle, were evaluated, among other things. With the fulfillment of the requirements, which were checked by TÜViT as part of a certification audit and the subsequent successful certification.
"With successful certification according to IEC 62443-4-1, TK Elevator can now objectively prove that industrial security has been considered from the very beginning and that the company's products meet the highest cybersecurity standards," says Axel Lange, Head of Marketing & Sales at TÜViT.
About TK Elevator
With customers in over 100 countries served by more than 50,000 employees, TK Elevator achieved sales of around €8 billion in the fiscal year 2020/2021. Over 1,000 locations around the world provide an extensive network that guarantees closeness to customers. Over the past decades, TK Elevator has established itself as one of the world’s leading elevator companies and became independent since its separation from thyssenkrupp AG in August 2020. The company’s most important business line is the service business represented by over 24,000 service technicians. The product portfolio covers commodity elevators for residential and commercial buildings to cutting-edge, highly customized solutions for state-of-the-art skyscrapers. In addition, it also consists of escalators and moving walks, passenger boarding bridges, stair and platform lifts. Integrated cloud-based service solutions, such as the MAX platform, are gaining in importance. With these digital offerings, there are no limits to urban mobility anymore. TKE – move beyond.
For more information, see: www.tkelevator.com
About TÜVIT
TÜV Informationstechnik focuses solely on security in information technology and, as an independent testing service provider for IT security, is an international leader. Its portfolio includes cyber security, software and hardware evaluation, IoT/Industry 4.0, data protection, ISMS, smart energy, mobile security, automotive security, eID and trust services as well as the testing and certification of data centers for physical security and high availability.
TÜV Informationstechnik, founded in 1995 and headquartered in Essen, Germany, is a member of the TÜV NORD GROUP, one of the world's largest technology service providers with over 14,000 employees and business activities in 100 countries worldwide.