18 February 2019 | Industrial Services
Essen/Zagreb: TÜV NORD has issued the world's first certificate in accordance with the new IEC 62443 family of standards under the IECEE CB Scheme for Croatian system integration specialist KONČAR Power Plant and Electric Traction Engineering (KONČAR-KET). The standards define measures for IT security in industrial communication networks. Networked components like those which have just been certified can be used, for example, to control power plants, wind turbines or solar power plants in residential buildings.
“The particular challenge posed by the project was to transfer the theoretical requirements of this new standard to real-life practice, bringing theory and practice in line for the first time. Now we’re delighted to have been able to present the first ever certificate according to IEC 62443 to KONČAR-KET,” says Ulf Theike, Member of the board of management of the Industrial Services business unit at TÜV NORD.
KONČAR has successfully developed the “PROZA NET” product in accordance with IEC 62443-2-4 and had it certified by TÜV NORD. PROZA NET is what is known as a SCADA system: Supervisory Control and Data Acquisition (SCADA) refers to the monitoring and control of technological processes using a computer system. SCADA systems are key components of all digitally networked industries. Section 2-4 of the family of standards sets the requirements for providers of industrial automation and control systems. The IT security assessment was conducted by TÜV Informationstechnik (TÜViT), the certification was carried out by TÜV NORD CERT.
New standard against cyberattacks
Many industries, ranging from the energy, process and automation industries to the rail and automotive sectors, are increasingly using networked components or systems. This requires steps to be taken to ensure that plants continue to run securely and that networked systems are protected from hackers. The new IEC 62443 series of standards defines procedures and best practice recommendations for the IT security of such industrial communication networks.
Certification in accordance with IEC 62443 analyses and assesses security concepts and measures. The certificate offers proof that the certified company is working in line with the state of the art and fulfilling its statutory duties of care - both of which are important requirements when it comes to minimising liability risks. In addition, components can in this way be safely released onto the market, in line with legislation such as the German Product Safety Act (ProdSichG).
TÜV NORD brings together services for digitally networked industries under the banner of “Security4Safety”, which combines classic product and operational safety with IT security. You can find out more at: https://www.tuev-nord.de/en/company/certification/product-certification/functional-safety/security4safety/.
About the TÜV NORD GROUP:
Since our foundation 150 years ago, we have been the global byword for security and trust. As a knowledge-based company, we have the digital future firmly in mind. With specialists ranging from engineers and IT security professionals to professionals for the mobility of tomorrow, we use our expertise in over 70 countries to ensure that our customers will be even more successful in the networked world.
KONČAR - Power Plant and Electric Traction Engineering Inc. (KONČAR - KET) is the main contracting and engineering company within the KONČAR - Electrical Industries Inc. (KONČAR Group). It is the main contracting company and the provider of engineering activities in projects involving construction or refurbishment of complex plants for power generation, transmission and distribution, for transportation and industry. KONČAR-KET represents the impetus of new product development and expansion to new business areas and activities in KONČAR Group.