New Machinery Directive and Industrial Security

Industrial security has the attention of a handful of companies that realize the seriousness of the consequences of a "hack. Or have already experienced them. However, with the upcoming amendment of the Machinery Directive, by 2027 all European companies must make their machines and installations safe in terms of Industrial Security. Many are not yet doing this. All the more reason for Pilz to develop the Industrial Security Consulting Service (ISCS).

Pilz is a developer and supplier of complete automation solutions for Machinesafety and Industrial Security. Important topics. Not only because the number and diversity of threats is increasing, but also because new European laws and regulations come into force in 2027. In a nutshell, the EU Directive NIS 2, the Cyber Resilience Act and the Machinery Regulation will oblige European companies from then on to make their machines and plants safe in terms of Industrial Security. Specialists at Pilz note, however, that few companies are yet seriously preparing to meet this obligation by 2027.

Among other things, Denny Yau is a Certified Machinery Safety Expert at Pilz and knows, "The subject matter is still too abstract for many companies, and as with all upcoming laws and regulations, 2027 still sounds too far away to worry about now. Yet it should be. After all, Industrial Security is not only a matter of laws and regulations, but mainly part of good entrepreneurship; you want to offer your customers a good and safe machine. Safe for the user, but also maximally protected against cyber attacks."

This doesn't happen to me...

The abstract nature of cybersecurity is related to the fact that many companies cannot imagine that anyone would even be interested in hacking their processes. Yau: "When they shut down your production, you're probably happy to pay to get back up and running as quickly as possible. This fact makes literally any company interesting."

In terms of hackers, by the way, it is not just cybercriminals but also "jokers" and hackers who systematically seek out "big fish. Idealistic action groups also sometimes want to undermine companies digitally. All in all, a company is hacked every 30-45 seconds worldwide. So the question is not so much whether it will be your turn, but when.

Roadmap

To support the entire process toward a secure machine, Pilz developed the Industrial Security Consulting Service (ISCS). Yau: "This gives companies, on the one hand, an indication of the danger and associated potential damage and, on the other, advice on how to comply with future laws and regulations and CE conformity with a particular solution."

The service includes four modules:

1. Protection need analysis. In this, Pilz experts in a specific company determine the scope of machinery or plant to be protected and also the protection goals of the system. 

2. Risk Assessment. In the second module, all risks and the probability of occurrence are assessed for each part and of the complete life cycle of the system. Based on this, experts from Pilz discuss solutions.

3. Preparation of an Industrial Security concept. This concept includes strategies and measures for averting and reducing risks due to attacks, manipulation and incorrect operation. It also establishes rules and guidelines for the continued secure operation of the system. 

4. Verification of the Industrial Security System. The final step verifies the effectiveness of the implemented countermeasures.

Says Yau, "Upon completion of the ISCS, machine manufacturers and operators will have a good understanding of the Industrial Security of their machines and plants, and current and future regulatory requirements will be met. Please feel free to contact Pilz to determine the possibilities for your own machines."