Cyber security

Share this page

PLC Automation technologies

Introduction

Cyber security is one of the most important topics for ABB and its customers. With the adoption of Industry 4.0 and IoT, more and more devices are connected with each other.

This is why the security of industrial automation and control systems is increasingly critical. ABB aims to protect the data, integrity and availability of all AC500 PLC products.

How ABB PLC products meet security challenges

ABB takes all necessary steps to continuously improve the security of its products. These measures follow commonly accepted industry standards and practices and include, where technically feasible:

ABB_picto_48x48_06_pc_app_0227-Small (1)

Robustness testing
including fuzzing
and flooding

ABB_picto_48x48_06_pc_warning_0234-Small (1)

Vulnerability scanning
for known vulnerabilities
and exploits

ABB_picto_48x48_06_pc_safety_0232-Small (2)

Security testing
including static code analysis
or binary code analysis

We highly recommend that all software, firmware, libraries and applications are kept up to date using the most recent firmware and software updates to keep your system and environment secure.

TÜV SÜD certification according to IEC 62443

We are pleased to announce that TÜV SÜD has certified

the ABB AG site in Heidelberg in accordance to the IEC 62443-4-1:2018 standard (Secure Product Development Lifecycle). This confirms that ABB develops secure-by-design products in accordance with the IEC 62443-4-1 process.
the AC500 product in accordance with the IEC 62443-4-2:2019 standard (Security for industrial automation components). This confirms the fulfillment of the security requirements defined by the IEC 62443-4-2 and the respective security level of the AC500 PLC.

AC500 PLC cyber security white paper

AC500 PLC cyber security FAQs

Certificate IEC 62443-4-1:2018

Certificate IEC 62443-4-2:2019

Designing secure automation systems

The design of an automation system should follow the IEC 62443-3-3 standard. This standard describes the requirements to be fulfilled by the automation system in total.

A risk and threat analysis of the planned automation system is the entry point of the secure planning process. The IEC 62443-4-2 certification of the AC500 PLC supports the process, as this component delivers the needed security functions.