The international standard series for the security of industrial automation and control systems, used in tenders for robots, machines and industrial devices.
The series covers the whole chain. Part 4-1 says how a supplier develops products. Part 4-2 says what a component must be able to do. Part 3-3 says what a complete system must achieve. Each applies at security levels 1 to 4.
It is not a robotics standard. Robots, controllers and gateways fall under it as components. The 2025 edition of the robot safety standard ISO 10218 adds a cybersecurity clause of its own.
The component requirements include integrity of the boot process, integrity of software, device identification and, at higher levels, hardware roots of trust. The series does not require remote attestation. Attestation is how the owner of a deployed unit checks those properties from a distance, after each change.
Attested OT and industrial controlAttested robotsAttested devices
Working on re-attestation for your product? A first call takes 30 minutes and commits you to nothing. Bring your product and the one question that worries you.
Next fixed date: EU Digital Identity Wallets are due in every member state on 24 December 2026, 42 days from now.