ISO/TR 22100-4, Safety of machinery and cyber security
Posted to News on 28th Feb 2019, 16:15

ISO/TR 22100-4, Safety of machinery and cyber security

In today's hyper-connected world, IT security covers not just data but virtually everything that moves - including industrial machinery. Cyber-attacks or IT malfunctions in manufacturing can pose risks to the safety measures in place, which can impact on production and people. New international guidance to identify and address such risks has just been published by ISO, namely ISO/TR 22100-4, Safety of machinery - Relationship with ISO 12100 - Part 4: Guidance to machinery manufacturers for consideration of related IT-security (cyber security) aspects.

ISO/TR 22100-4, Safety of machinery and cyber security

'Smart' manufacturing, or that which takes advantage of Internet and digital technologies, allows for seamless production and integration across the entire value chain. It also allows for parameters - such as speed, force and temperature - to be controlled remotely. The benefits are many, including being able to track performance and usage and improved efficiencies, but it also exacerbates the risk of IT security threats.

Increasing the speed or force of a machine to dangerous levels, or lowering cooking temperatures to result in food contamination, are just some examples of how cyber-attacks can disrupt manufacturing and pose serious risks to us. Fortunately a new ISO technical report (TR) has just been published to help manufacturers prepare for and mitigate these risks.

ISO/TR 22100-4 'Safety of machinery - Relationship with ISO 12100 - Part 4: Guidance to machinery manufacturers for consideration of related IT-security (cyber security) aspects' is designed to help machine builders identify and address IT security threats that can impact on safety. It complements ISO's flagship standard for machine safety, ISO 12100 'Safety of machinery - General principles for design - Risk assessment and risk reduction', which lays down the fundamentals for risk assessment, hazard analysis and documentation requirements.

Otto Grnemann, Chair of the ISO technical committee in charge of the technical report, said machine safety and cybersecurity differ greatly when it comes to their objectives, methods and measures, yet in manufacturing they are inextricably linked: "ISO/TR 22100-4 will help machine manufacturers integrate the relationship between cybersecurity and machine safety.

"It will thus cover aspects such as the types of components that could be potential targets for cybersecurity attacks, the design of the machine to minimize vulnerability to such attacks and information for the machine operator on possible threats."

ISO/TR 22100-4 was developed by ISO technical committee ISO/TC 199, Safety of machinery, the secretariat of which is held by DIN, ISO's member for Germany. It is available from national ISO members or through the ISO Store.


ISO (International Organization for Standarization)

1, ch. de la Voie-Creuse
Case postale 56
CH-1211 Geneva
SWITZERLAND

+41 22 749 01 11

Bosch Rexroth Pilz Automation Ltd ABSSAC Ltd Procter Machine Safety SICK (UK) LTD Mechan Controls Ltd Leuze electronic Ltd M Buttkereit Ltd Kawasaki Robotics (UK) Ltd HARTING Ltd Aerotech Ltd WEG (UK) Ltd AutomateUK AutomateUK Heidenhain (GB) Ltd Servo Components & Systems Ltd PI (Physik Instrumente) Ltd Micro Epsilon UK Limited STOBER Drives Ltd Dold Industries Ltd Euchner (UK) Rittal Ltd Spelsberg Els UK Ltd FATH Components Ltd Machinesafe Compliance Ltd Phoenix Contact Ltd Murrelektronik Ltd Smartscan Ltd