BSI TR-03185 on the Secure Software Lifecycle
TR-03185 is a technical guideline from Germany's Federal Office for Information Security (BSI) on the secure software lifecycle. It is a national guideline, not an EU standard. It is still …
All articles
Using IEC 62443 to Meet Cyber Resilience Act Requirements
The European Union's Cyber Resilience Act (CRA) sets new cybersecurity requirements for manufacturers of products with digital elements. The international standard series IEC 62443 gives you a sound framework to …
IEC 62443-4-1 Templates Compared
If you want to build a secure development lifecycle under IEC 62443-4-1, you do not have to start from a blank page. The market offers ready-made template packages, a free …
SESIP Security Evaluation for IoT Platforms
The Internet of Things (IoT) is growing fast, and with billions of connected devices, the risk of vulnerabilities and cyberattacks grows exponentially. The Security Evaluation Standard for IoT Platforms (SESIP) …
Building a PSIRT with the FIRST PSIRT Services Framework
Connected products need someone who takes care of their vulnerabilities after release. Many companies give this task to a product security incident response team (PSIRT) . The Forum of Incident …
What Changed in IEC 62443-2-1 Edition 2
The second edition of IEC 62443-2-1, titled “Security for industrial automation and control systems – Part 2-1: Security program requirements for IACS asset owners”, has been published. It is a …
What the NIS2 Directive Means for Machinery Manufacturers
With the NIS2 Directive (Directive (EU) 2022/2555), the European Union has taken a major step to strengthen cybersecurity across the EU. NIS2 is the second directive on the security of …
How NIS2, the CRA, and the Cybersecurity Act Fit Together
In recent years, the European Union has introduced several important laws to strengthen cybersecurity in Europe. Three of them form the central pillars: the NIS2 Directive , the Cyber Resilience …
IEC 62443 Training Courses Compared
IEC 62443 has become the global standard for security in operational technology (OT). It provides a framework for protecting critical infrastructure against cyberattacks. To apply it, companies need qualified staff …