ISO/TR 22100-4, Safety of machinery and cyber security
The Engineering Network Ltd
Posted to News on 28th Feb 2019, 16:15

ISO/TR 22100-4, Safety of machinery and cyber security

In today's hyper-connected world, IT security covers not just data but virtually everything that moves - including industrial machinery. Cyber-attacks or IT malfunctions in manufacturing can pose risks to the safety measures in place, which can impact on production and people. New international guidance to identify and address such risks has just been published by ISO, namely ISO/TR 22100-4, Safety of machinery - Relationship with ISO 12100 - Part 4: Guidance to machinery manufacturers for consideration of related IT-security (cyber security) aspects.

ISO/TR 22100-4, Safety of machinery and cyber security

'Smart' manufacturing, or that which takes advantage of Internet and digital technologies, allows for seamless production and integration across the entire value chain. It also allows for parameters - such as speed, force and temperature - to be controlled remotely. The benefits are many, including being able to track performance and usage and improved efficiencies, but it also exacerbates the risk of IT security threats.

Increasing the speed or force of a machine to dangerous levels, or lowering cooking temperatures to result in food contamination, are just some examples of how cyber-attacks can disrupt manufacturing and pose serious risks to us. Fortunately a new ISO technical report (TR) has just been published to help manufacturers prepare for and mitigate these risks.

ISO/TR 22100-4 'Safety of machinery - Relationship with ISO 12100 - Part 4: Guidance to machinery manufacturers for consideration of related IT-security (cyber security) aspects' is designed to help machine builders identify and address IT security threats that can impact on safety. It complements ISO's flagship standard for machine safety, ISO 12100 'Safety of machinery - General principles for design - Risk assessment and risk reduction', which lays down the fundamentals for risk assessment, hazard analysis and documentation requirements.

Otto Grnemann, Chair of the ISO technical committee in charge of the technical report, said machine safety and cybersecurity differ greatly when it comes to their objectives, methods and measures, yet in manufacturing they are inextricably linked: "ISO/TR 22100-4 will help machine manufacturers integrate the relationship between cybersecurity and machine safety.

"It will thus cover aspects such as the types of components that could be potential targets for cybersecurity attacks, the design of the machine to minimize vulnerability to such attacks and information for the machine operator on possible threats."

ISO/TR 22100-4 was developed by ISO technical committee ISO/TC 199, Safety of machinery, the secretariat of which is held by DIN, ISO's member for Germany. It is available from national ISO members or through the ISO Store.


ISO (International Organization for Standarization)

1, ch. de la Voie-Creuse
Case postale 56
CH-1211 Geneva
SWITZERLAND

+41 22 749 01 11

The Engineering Network Ltd Mechan Controls Ltd ABSSAC Ltd SICK (UK) LTD Euchner UK Ltd Rittal Ltd Lenze Selection (a Division of Lenze Ltd) STOBER Drives Ltd ifm electronic Limited Smartscan Ltd Phoenix Contact UK KEB (UK) Ltd Pilz Automation Technology Kawasaki Robotics (UK) Ltd HARTING Ltd Murrelektronik Ltd Heidenhain (GB) Ltd Aerotech Ltd Leuze electronic Ltd FATH Components Ltd PI (Physik Instrumente) Ltd Procter Machine Safety
The Engineering Network Ltd