Connectors to FPGA and SoC FPAG standard.

A new product portfolio designed for the SGeT oHFM.c standard has been announced by Samtec. These connectors are based on the company's proven AcceleRate® HD and AcceleRate® HP high-density, high-performance product families.

oHFM™, or Open Harmonized FPGA Module, is the world’s first open modular FPGA standard. It addresses the common challenges of unique pinouts, custom form factors, and proprietary thermal concepts of FPGA and SOM development by providing a unified, scalable architecture. Ready-to-use building blocks and clear design rules reduce engineering time for faster time-to-market.

Connector-based SOMs defined by the oHFM.c standard are optimized for compact high-speed interfaces, mid- to high-end FPGAs, and in-field upgrades using 5 mm or 10 mm stack height Samtec connectors. Samtec’s oHFM.c connectors feature high-density channels on a 0.635 mm pitch with performance targets of 64 Gbps PAM4 or 112 Gbps PAM4. Inside each connector, the narrow edges of the Edge Rate® contact system are aligned with the connector body to reduce broadside coupling and crosstalk, optimizing signal integrity. The Edge Rate contact system also features a smooth, broad milled mating surface which reduces wear and increases durability for high-cycle applications. Samtec’s IPC Class 3-compliant solder column board termination technique is used to secure connectors to the printed circuit board. Solder column termination provides superior solder joint reliability and excellent insertion loss and return loss performance.

Designed to meet the evolving demands of FPGA-based compute platforms, Samtec’s interconnect solutions enable scalable, flexible, and reliable system architectures for next-generation embedded and edge applications.

---

@SamtecInc  @TechWireIntl #Electronics #PAuto #Connectors

Testing radiated immunity beyond 6GHz.

EMC expertise to emerging frequencies (5G, Wi-Fi 6E/7) for medical devices targeting the U.S. market.

A new testing methodology, validated by Emitech's innovation department, enables the French laboratory to test the radiated immunity of medical devices beyond 6 GHz—where no standards currently apply—thereby anticipating the expectations of the U.S. FDA.

In the medical sector the Emitech Group supports manufacturers, importers, and distributors in bringing their products to the U.S. market via the FDA 510(k) pathway. Their technical dossier must demonstrate the product’s electromagnetic compatibility, particularly with regard to the collateral standard IEC 60601-1-2 and its FDA-recognized version (ANSI/AAMI/IEC 60601-1-2). However, this standard—like all current EMC standards—covers radiated immunity testing only up to 6 GHz, whereas medical devices now incorporate wireless functions that operate in higher frequency bands: 5G FR2, Wi-Fi 6E, and Wi-Fi 7.

The FDA’s June 2022 guidance on the electromagnetic compatibility of medical devices explicitly requires manufacturers to identify and technically justify the electromagnetic risks associated with their product’s real-world usage environment, even when no standard yet covers them. For devices incorporating these new wireless technologies, this creates a methodological gap: how can a product’s robustness be demonstrated at frequencies that the standard does not test?

It is in this context that the Emitech Group, with the approval of its innovation department, has developed a radiated immunity testing methodology applicable beyond 6 GHz. Its approach mirrors the one Emitech previously applied when the FDA required immunity to RFID readers even though no standardized method yet existed: the same type of modulation, field levels derived from the reference radiated immunity level in IEC 60601-1-2 (ranging from 10 V/m to 28 V/m depending on the severity of the target environment), this time applied to the frequencies of 5G FR2, Wi-Fi 6E, and Wi-Fi 7. “We cannot wait for a standard to be established to meet the FDA’s requirements: our role is to work with our clients to build a well-founded and traceable technical dossier,” emphasizes David Montaulon, EMC & Radio Expert at the Emitech Group.

Technical resources dedicated to high frequencies.
To implement this methodology, the Emitech Group relies on testing resources that are uncommon among players in the medical market. It utilizes resources originally developed for its defense-related activities; its antennas and radio-frequency generators cover frequencies up to approximately 40 GHz, enabling radiated immunity testing on bands not covered by current standards (5G FR2, Wi-Fi 6E/7).

For near-field testing above 18 GHz, the laboratory repurposes a high-precision motorized mast, originally developed for radio frequency measurements up to 140 GHz. This device enables automatic scanning at a distance of approximately 5 cm from the product under test, ensuring uniform exposure and excellent reproducibility. All tests are conducted in an anechoic chamber, covering the entire surface of the equipment.

An approach based on foresight, not on waiting for a standard.
The RFID case study illustrates this philosophy. When a client—a manufacturer of enteral feeding pumps—was faced with an FDA recommendation regarding immunity to RFID frequencies, even though no standardized test bench existed, the Emitech Group developed its own in-house solution. As a result, its teams enabled the client to secure market authorization in the U.S. even before the FDA formally recognized AIM Standard 7351731, which addresses this immunity. Today, the Emitech Group applies the same approach to emerging 5G and Wi-Fi frequencies, convinced that part of this methodology will eventually be incorporated into future regulatory standards as well.

Philosophy rooted in the FDA’s Risk Management Approach.
The FDA does not systematically require additional testing; rather, it seeks to verify that the risk has been identified, analyzed, and technically justified. This is the crux of this methodology: it enables the Emitech Group’s clients to compile a traceable technical dossier that aligns with the spirit of the FDA guidance, rather than encountering a roadblock during the review of the 510(k) application.

For manufacturers, the benefit is clear: by incorporating these tests from the product design phase, they reduce the risk of delays caused by a Request for Additional Information (AFI) during the 510(k) review process.

A longer-term goal.
Beyond this new methodology, the Emitech Group intends to remain a leading player in anticipating electromagnetic risks associated with emerging wireless technologies—whether they involve the next generations of Wi-Fi or future mobile networks. This ability to anticipate risks—already proven in the RFID sector—is a key differentiator that enables the Group to support its clients as soon as new frequency bands emerge, even before they are covered by a standard.

---

EMITECH_SA  @mepaxIntPR #Medical #USA #FDA #TandM

Secure accreditation assured.

The American Association for Laboratory Accreditation (A2LA), an ISASecure® Accreditation Body (AB), is now offering Inspection Body (IB) and Product Certification Body (CB) accreditation for ISASecure Automation and Control System Security Assurance (ACSSA) Certification to ISA/IEC 62443-2-1, 2-2, 3-2 and 3-3. ISASecure, a wholly owned subsidiary of ISA, is a globally recognized certification program that validates conformance to the ISA/IEC 62443 series of standards for industrial automation and control systems (IACS) cybersecurity.

ISASecure’s CBs and IBs are independently accredited by ISO/IEC 17011 Accreditation Bodies (ABs) that are Multilateral Recognition Arrangement (MRA) signatories of the Global Accreditation Cooperation Incorporated (Global ACI) for ISO/IEC 17065, ISO/IEC 17025 and ISO/IEC 17020.

A2LA is among the largest accreditation bodies in the world and the only independent 501(c)3 non-profit internationally recognized accreditation body in the United States that offers a full range of comprehensive conformity assessment accreditation services.

Established in 1978 as a public service membership society, A2LA is dedicated to the formal recognition of competent testing and calibration laboratories, biobanking facilities, inspection bodies, product certification bodies, proficiency testing providers and reference material producers. A2LA has over 4,500 actively accredited certificates representing all 50 US states and more than 50 countries. For a current listing of A2LA’s accredited organizations, please search A2LA’s directory.

All ISASecure certification testing is conducted by accredited, independent test laboratories. A2LA has been an ISASecure AB working with members to become CBs for ISASecure’s Security Development Lifecycle (SLDA), Component Security Assurance (CSA) and System Security Assurance (SSA).

“Expanding A2LA’s services to include Inspection Body and Product Certification Body accreditation for ACSSA reflects our commitment to supporting emerging cybersecurity frameworks that protect critical infrastructure,” says Trace McInturff, vice president of accreditation services, A2LA. “As automation and control systems become increasingly interconnected, independent third-party assurance is essential. We are proud to be recognized by ISASecure and to help organizations demonstrate competence, consistency and conformance in this rapidly evolving area.”

“A2LA has a great reputation for being on the leading edge of cybersecurity. We look forward to A2LA’s newest offering to ISASecure members who are looking to be an IB or CB for ACSSA,” says Dr. Mark DeAngelo, ISASecure program manager. “It’s an important milestone for ISASecure ACSSA and for the future security of critical industrial sites.”

---

@ISA_Automation  @automation_com #A2LA #ISA62443 #PAuto #Cybersecurity #USA

Security in engineering.

Proven standards for critical infrastructure – more relevant today than ever.

The topic of cybersecurity is currently gaining new regulatory visibility with the NIS2 Implementation Act and the upcoming Cyber Resilience Act (CRA). Requirements are becoming more concrete, obligations to provide evidence are increasing, and deadlines are drawing closer. This means a need for action for many companies. AUCOTEC regards this above all as confirmation.

AUCOTEC has worked for decades with operators of critical infrastructure. Throughout all these years, one central customer expectation has been taken as a given: the systems used must be secure at all times. Cyber Security is therefore not a new field of action, but has always been an integral part of the development and provision of the Engineering Base software platform.

Regulatory momentum meets established practice.
The current developments surrounding NIS2 and the CRA do not change the fundamental expectation of security – they make it more visible, measurable and, in many cases, also formally subject to evidence requirements.

This is precisely where AUCOTEC creates additional transparency: Engineering Base versions 2025 and 2026 were independently analysed using ReversingLabs Spectra Assure – and achieved Level 3 in the assessment process.

Importantly, this analysis does not mark a new security level, but confirms the one already established. At the time of the assessment, no known vulnerabilities classified as critical, no malware findings and no relevant license risks were identified. This is complemented by full transparency regarding all software components used, in the form of a Software Bill of Materials (SBOM).

External validation of an existing commitment.
“Cyber Security has never been optional for our customers – and therefore not for us either,” explains Dr. Jan-Mirko Maczewski, Head of Research & Development at AUCOTEC. “Current regulatory requirements such as NIS2 or the Cyber Resilience Act are not prompting a rethink; rather, they confirm our long-standing approach.”

The Spectra analysis addresses key technical aspects of modern security requirements – in particular transparency, traceability and the systematic assessment of software components. There is no formal equivalence with regulatory requirements. However, there is substantial alignment in key areas.

For customers, this means: a robust, independent security assessment, support in meeting growing evidence requirements, reduced effort in audit and approval processes, and additional assurance in regulated project environments.

Continuity as the decisive factor.
The independent assessment is deliberately designed as part of a continuous process. Security analyses are carried out regularly and continued with every version.

The fact that both the current and the already established version of Engineering Base achieve this level underlines the key message: Cyber Security at AUCOTEC is a consistent standard.

Holistically embedded – technologically and organisationally.
This commitment is reflected not only in the product itself, but also in the supporting structures: ISO 27001-certified information security management, ISO 9001-certified quality management, clear responsibilities, including through a Chief Information Security Officer (CISO), as well as established audit and governance processes.

These are being continuously developed further with the ongoing expansion of Quality Excellence structures.

A clear signal in the context of new requirements.
Looking ahead to the upcoming CRA deadlines and the implementation of NIS2, it is clear: Cyber Security is increasingly evolving from an implicit expectation into an explicit obligation to provide evidence. AUCOTEC is addressing this development with transparency regarding a security level that has been established for decades. Or put another way: the requirements are becoming more concrete – the response to them has long been part of the solution at AUCOTEC.

---

@AUCOTEC_AG @PresseBox @UnnGmbh @Cybersec_EU @ec.europa.eu #Aucutec #Cybersecurity #PAuto

Fully accredited cyber certification for security consultant.

Perseus Information Security Consulting has received full accreditation from the A2LA Accreditation Body to serve as an ISO/IEC 17065 accredited certification body (CB) for the globally recognised certification program ISASecure®. Perseus is also now the first accredited CB for ISASecure’s new Automation and Control System Security Assurance (ACSSA) for Asset Owners to ISA/IEC 62443-2-1, 62443-2-4, 62443-3-2 and 62443-3-3.

"We are pleased to have Perseus Information Security Consulting join the ISASecure program as an accredited ISASecure certification body and become the first approved ACSSA CB,” said Dr. Mark P. DeAngelo, program manager of ISASecure.

The ISASecure program — which currently has ISO/IEC 17065 accredited certification bodies in the U.S., Japan, Taiwan, Singapore, Italy, Germany and India — is rapidly expanding its global reach through additional agreements with certification bodies around the world.

The ISASecure certification program validates conformance to the ISA/IEC 62443 series of internationally adopted standards for industrial security, with additional certifications for Security Development Lifecycle Assurance (SDLA), Component Security Assurance (CSA), IIoT Component Security Assurance (ICSA) and System Security Assurance (SSA).

Perseus has now begun accepting product submittals for ISASecure certification at their United States office and their Istanbul, Türkiye office. Perseus Information Security Consulting contact details can be found on the ISASecure website at this link.

ISASecure assesses automation and control products and systems to ensure they are robust against network attacks, free from known vulnerabilities and meet the security capabilities defined in the ISA/IEC 62443 standards. All ISASecure certifications are conducted by globally recognised ISO/IEC 17065 accredited certification bodies.

In addition to being certified by the ISO/IEC 17065 Accreditation Body, ACSSA CBs are required to take the new ISASecure Automation and Control System Security Assurance for Evaluators (IC49) three-day training class and pass the IC49 proctored exam.

Perseus Information Security Consulting provides technology consultation in the field of cybersecurity for enterprise-level organisations, namely, providing technological advice regarding cybersecurity strategy and risk and analysis of technological goods of others to assure compliance with cybersecurity industry standards. Their services also include TISAX Consulting, conducting SWIFT CSP Assessments, ICS/SCADA consulting, authorised EPDK cybersecurity maturity assessments across all seven of Türkiye's energy subsectors and now ISASecure ACSSA, SDLA, CSA, SSA and ICSA certification to ISA/IEC 62443 standard.

As an ISA Security Compliance Institute (ISCI) member, Perseus has been involved in the technical development of ISASecure’s newest conformance scheme, the ISASecure Automation Control System Security Assurance (ACSSA) program. Perseus staff, including Deniz Kaya and Burak Bicer, were among the first in the world to complete the ISASecure ACSSA for Evaluators training and certification.

"ISASecure and the ISA/IEC 62443 standards have become the global benchmark for industrial cybersecurity. Becoming the first accredited ACSSA certification body lets Perseus give asset owners an independent, internationally recognised way to prove that their automation and control systems meet that benchmark,” Kaya says. “We're proud to bring this capability to organisations across the United States, Türkiye and beyond."

---

@ISA_Automation @automation_com #PerseusInfo  #ISA/IEC62443 #Cybersecurity 

Cyber-secure embedded applications certified.

Certification for development and support of embedded building blocks and tech stacks awarded.

congatec has been certified to IEC 62443-4-1:2018 for the development and support of its embedded building blocks and tech stacks. With the certification issued by TÜV NORD, customers using congatec’s portfolio gain a solid foundation for developing their own products quickly and efficiently under increasing security and compliance requirements, while also demonstrably securing their supply chains. Customers benefit from secure implementation, including coding guidelines, verification and validation, as well as vulnerability, patch and obsolescence management for congatec’s application-ready building blocks and aReady.COM technology stacks. This offers significant time-to-market advantages, particularly in regulated markets such as automation and robotics, medical and energy technology, as well as transportation.

The company’s certified development and support processes demonstrate that cybersecurity is an integral part of all development phases from the outset. The tech stacks, consisting of a computer-on-module, licensed operating systems such as Ubuntu Pro and ctrlX OS, as well as software building blocks such as conga-connect (aReady.IOT) and conga-zones (aReady.VT), are based on audited development and support processes. This is also an important prerequisite for OEMs seeking to place electronic devices on the EU market, making it easier to meet the upcoming regulatory requirements of the Cyber Resilience Act (CRA), which becomes mandatory from 11 December 2027.

“By achieving IEC 62443-4-1 certification, we are demonstrating in accordance with internationally applicable guidelines, that we integrate cybersecurity consistently and verifiably into our development and support processes,” Konrad Garhammer, COO & CTO of congatec explains. “This gives our customers application-ready embedded building blocks and tech stacks based on certified development and support processes. It further supports integration into their own applications, simplifies security verification for customers and regulatory authorities, and creates a robust foundation for CRA-relevant compliance processes.”

“Our tech stacks developed in accordance with IEC 62443-4-1, including licensed operating systems, hypervisor and IoT connectors, help customers build their own compliance and security evidence more efficiently and simplify and accelerate certification work,” Dominik Ressing, CEO of congatec adds. “Companies, already relying on our building blocks today are positioning themselves early and efficiently for the requirements of the CRA and comparable regulatory frameworks.”

---

@congatecAG @UnnGmbh #PAuto

Ready for Cyber Resilience Act CRA.

An easy way for industrial manufacturers, system integrators, and factory owners to meet EU cybersecurity requirements for connected industrial products.

Under the EU Cyber Resilience Act, connectivity is no longer just a functional component of a product. It becomes a regulated part that must support long term security, secure updates, documentation, and compliance evidence throughout the product lifecycle. To address these requirements, HMS Networks has updated its Anybus Communicator portfolio with enhanced hardware and software security features developed under IEC 62443 certified secure product development processes.

“With the Cyber Resilience Act, cybersecurity becomes a purchasing requirement, not just a technical consideration,” said Fredrik Brynolf, Gateway Business Line Director at HMS Networks. “By making Anybus Communicators CRA ready, we help our customers reduce compliance effort and risk, while continuing to rely on a proven, industrial grade connectivity solutions.”

To strengthen long term security and lifecycle robustness, Anybus Communicators now include several key updates.

Hardware updates supporting long term security

Real time clock and supercapacitor - These ensure reliable timestamps for certificates, logs, and diagnostics, even during extended power off periods such as weekend shutdowns.

Dedicated security chip - Cryptographic keys and sensitive data are stored securely, enabling strong encryption and protection against tampering. Together, the real time clock with backup power and the security chip provide a stronger hardware foundation for secure operation and long term lifecycle support under CRA.

Software features aligned with CRA relevant security needs:

Secure configuration - Configuration access is protected using HTTPS, preventing man in the middle attacks during commissioning and maintenance. Certificates are user managed to support secure configuration in different environments.

Role based access control - Password protection is activated directly in the web user interface. Each device is delivered with a unique default Admin password, laser marked on the product during production and used for first time login.

Three standard roles are supported:

• Admin – full access
• User – slave network configuration
• Operator – read only access

This ensures that configuration access matches operational responsibility.

Controlled updates and lifecycle protection.
The Anybus Communicator supports a controlled firmware lifecycle. On CRA ready devices with updated hardware, safeguards are in place to prevent downgrading to firmware versions released prior to the hardware update, ensuring that CRA relevant security capabilities are not removed.

Protection of intellectual property.
Machine builders and device makers can simplify configuration for end users and protect intellectual property by hiding Master configuration details.

Meeting customer requirements.

By integrating these hardware and software updates, the Anybus Communicator provides CRA ready connectivity out of the box. This helps device makers, machine builders, system integrators, and factory operators respond to growing cybersecurity, compliance, and purchasing requirements from customers.

Manufacturers and integrators can continue to rely on the Anybus Communicator for both industrial network connectivity and cybersecurity. Units in the field remain supported, while new units are delivered with CRA ready hardware and software, providing a clear, non disruptive path to meet CRA and customer cybersecurity requirements.

The company builds and maintains connectivity, security tooling, and compliance over the product lifecycle, so customers don’t have to. For many use cases, implementing an Anybus Communicator is the simplest, lowest effort way to meet CRA expectations while preserving uptime, performance, and market access.

CRA ready Anybus Communicators start shipping during spring 2026, approximately 1.5 years before the Cyber Resilience Act is enforced.

---

@hmsnetworks @HMSAnybus @ec.europa.eu @mepaxIntPR #PAuto #DigitalEU #Cybersecurity #Standards

Secure accreditation.

Palindrome Technologies has received full accreditation from the International Accreditation Service (IAS) and ANSI National Accreditation Board (ANAB) to serve as an ISO/IEC 17065 accredited certification body for the globally recognised certification program ISASecure®*.

"We are pleased to have Palindrome Technologies join the ISASecure program as an accredited ISASecure certification body,” said Dr. Mark P. DeAngelo, program manager of ISASecure®.

The ISASecure certification program validates conformance to the ISA/IEC 62443 series of internationally adopted standards for industrial security. Palindrome is now accepting product submittals for ISASecure certification.

ISASecure assesses automation and control products and systems to ensure they are robust against network attacks, free from known vulnerabilities and meet the security capabilities defined in the ISA/IEC 62443 standards. All ISASecure certifications are conducted by globally recognised ISO/IEC 17065 accredited certification bodies.

Palindrome Technologies is a cybersecurity research and testing firm, established in 2005, which provides security assurance services to Fortune 500 companies and growing organisations. Palindrome is an accredited ISO/IEC 17025 laboratory and can guide customers through product certifications including IEEE, NIST, HITRUST, HIPAA and now ISASecure SDLA, CSA, SSA and ICSA certification to ISA/IEC 62443 standard.

As an ISA Security Compliance Institute (ISCI) member, Palindrome has been involved in the technical development of ISASecure’s newest conformance scheme, the ISASecure Automation Control System Security Assurance (ACSSA) program. Palindrome staff were among the first to complete the ISASecure ACSSA for Evaluators training and certification.

“The ISASecure certification program gives product suppliers a clear, globally recognised path to demonstrate conformance to the ISA/IEC 62443 standard and provides asset owners greater confidence that the technologies they deploy are robust against real-world threats. Palindrome is proud to support this mission with rigorous, repeatable evaluations that help teams build security in from the start and differentiate trusted products in the marketplace,” said Mike Stauffer, vice president of product testing and certification at Palindrome Technologies.

---

* The ISASecure program — which currently has ISO/IEC 17065 accredited certification bodies in the U.S., Japan, Taiwan, Singapore, Italy, Germany and India — is rapidly expanding its global reach through additional agreements with certification bodies around the world. 

@PalindromeTech @ISA_Automation  @automation_com #ISA/IEC62443 #PAuto #Cybersecurity

Cybersecurity certification achieved.

The PcVue platform from ARC Informatique has successfully achieved IEC 62443-4-2 SL2 certification, a key milestone in our cybersecurity strategy. Following their IEC 62443-4-1 certification, this new achievement confirms our commitment to secure our product. It places PcVue among a select group of solutions that meet the cybersecurity requirements for critical infrastructure.

Already certified under ISO 9001, ISO 14001 and ISO 27001, ARC Informatique continues to strengthen its governance model by integrating cybersecurity at every level.

While IEC 62443-4-1 focuses on secure development practices, IEC 62443-4-2 ensures that the components of the PcVue platform meet strict security requirements, addressing risks directly at the product level

For PcVue users and partners, this certification provides greater confidence by delivering a platform that is not only high performing, but also secure, trusted and resilient against evolving cyber threats.

"We remain committed to supporting operations with reliable and cyber-resilient solutions," said a statement from the company.

---

@arcinformatique @mepaxIntPR #PAuto #ISA62443 

Stringent security requirements confirmed.

The SEMI E187 certification has been received by Antaira Technologies. This certification confirms that Antaira’s industrial network switch solutions meet the stringent security requirements of modern manufacturing.

LtoR: Kelvin Yen, IT Director of SGS Cybersecurity Lab
& Frank Hou, Global CEO of Antaira.

Kelvin Yen, IT Director of SGS Cybersecurity Lab and General Management Office, stated: "As the semiconductor industry’s cybersecurity requirements for equipment continue to escalate, SEMI E187 is emerging as a pivotal security benchmark for the global supply chain. Through third-party verification mechanisms, manufacturers can not only establish cybersecurity capabilities that earn market trust but also contribute to the security maturity of the entire industrial chain. SGS is honored to have assisted Antaira in completing this verification, as we work together to drive the implementation of these critical industry standards."

"Achieving SEMI E187 compliance is a testament to our ‘Resilience-first' engineering philosophy," said Frank Hou, CEO at Antaira Technologies. "We understand that in the semiconductor world, a single hour of downtime can cost millions. By securing the network layer, we are providing our partners with the hardened infrastructure they need to build with confidence."

In the fast-evolving world of semiconductor manufacturing, cybersecurity is a necessity for operational success. SEMI E187 is widely recognized as a key industry benchmark for equipment security, specifically focusing on how devices connect and communicate safely. By meeting these demanding requirements, Antaira provides a powerful defense for modern fabrication facilities through its certified industrial networking solutions. For fab operators, selecting SEMI E187-certified network devices represents a commitment to a secure networking backbone that safeguards sensitive data and maintains uninterrupted production.

Antaira’s SEMI E187-certified industrial Ethernet switches embed security at the architectural level and not as an add-on layer. By integrating SEMI E187 compliance directly into its core firmware development and lifecycle management processes, Antaira delivers a high-trust network environment where cybersecurity is intrinsic to every deployment within a semiconductor manufacturing facility.

Certified Antaira solutions feature:

• Validated Endpoint Protection — Every connection point across the facility is authenticated and hardened against unauthorized access.
• Secure-by-Default Configurations — Factory-default security postures eliminate misconfiguration vulnerabilities from initial deployment.
• Proactive Vulnerability Management & Long-Term Support Roadmap — Structured security patching cycles ensure network defenses evolve in step with the threat landscape.

As the global semiconductor supply chain faces increasing scrutiny over cybersecurity posture and vendor accountability, Antaira’s adherence to this standard, as it is phased in across switch models, establishes a transparent, verifiable security baseline across the manufacturing ecosystem. For system integrators, OEM partners, and fab operators alike, Antaira-certified infrastructure is the foundation upon which resilient, future-proof semiconductor production is built.

---

@AntairaTech @SGS_SA @OConnell_PR #PAuto #Cybersecurity

Standard for distributed workflow system integration.

The International Society of Automation (ISA) has issued a call for participants to join the new ISA113 Standard Committee, a strategic initiative focused on defining a specification for integrating distributed workflow systems across multiple vendor platforms.*

The ISA113 Standard Committee is being formed to address a growing need for improved interoperability across workflow systems used in industrial organisations. Many teams face a significant burden from bespoke, one-off integration projects required to connect workflow systems. ISA113 aims to create a standard that bridges workflow styles, decouples workflow logic from where work happens, establishes action-based integration for operational technology (OT)/IT workflows and builds a foundation for multi-system orchestration.

The American National Standards Institute (ANSI) is to publish the official call for ISA113 committee members today (20 March 2026)

. The call for interested parties will remain open for 30 days following this publication date. Individuals with relevant expertise and interest in contributing to this effort are encouraged to participate.

One particular area of emphasis for the committee’s work will be enabling interoperability between orchestrated workflows and choreographed workflows. Orchestrated workflows, such as ISA-88-style hierarchical procedures and phases, are widely used in industrial automation and batch control environments. Choreographed workflows, which are common in Business Process Model and Notation (BPMN), manufacturing execution systems (MES) and broader business process environments, support more distributed and event-driven process coordination. As organisations undergo digital transformation, they increasingly rely on both styles, and the need for seamless integration between them has become more urgent.

“The goal of initiating the ISA113 Standard Committee is to help bridge OT/IT workflow styles,” said Steve Ferguson (right), managing director of standards and technical activities at ISA. “This work has the potential to help organisations improve efficiency, reduce integration risk and support more scalable digital transformation initiatives. A vendor-neutral standard can also foster greater collaboration across suppliers, end users, integrators and software providers.”

ISA welcomes participation from end users, automation suppliers, software vendors, system integrators, consultants and other stakeholders with expertise in workflow systems, industrial automation, MES, BPMN and standards development. Broad representation will be essential to ensuring the resulting standard reflects diverse industry needs and delivers practical value.

Those interested in helping shape the future of distributed workflow interoperability are encouraged to respond during the 30-day ANSI call period.

---

* For additional information or to express interest, contact standards@isa.org.

@ISA_Automation @ansidotorg @ISAIreland @automation_com #PAuto #ISA113 #Standards

SCADA standard.

Provides a framework for modernising supervisory control and data acquisition systems and making them easier to design, build, operate and maintain.

The publication of ANSI/ISA-112.00.01-2025, SCADA Systems – Part 1: SCADA Lifecycle, Diagrams and Terminology has been announced by The International Society of Automation (ISA). This is now available for sale from their website and is, of course, accessible to ISA members as a membership benefit.

Supervisory control and data acquisition (SCADA) is an automated control system architecture commonly implemented in industrial, utility and manufacturing environments. The ISA-112 Part 1 standard provides a vendor-neutral and technology-independent framework for the long-term management of SCADA systems and execution of SCADA modernization projects, offering a high-level overview of the SCADA lifecycle as well as diagrams and terminology. ISA-112 Part 1 applies to a wide variety of industries, including municipal water/wastewater facilities, oil/gas infrastructure, pipelines, dam/irrigation systems, electricity transmission/distribution, railways, highways, bridges/tunnels, airports, civil infrastructure, manufacturing, mining, defense and remote monitoring. Additional parts of ISA-112 addressing SCADA lifecycle review processes and SCADA architectures are also planned for release.

ISA-112 Part 1 is intended for companies, utilities, system integrators and others, whether they are designing a new SCADA system or upgrading existing legacy systems to meet modern security and connectivity requirements. An ANSI-approved American National Standard, ISA-112 Part 1 includes a functional architecture model and lifecycle framework applicable to every type of SCADA project, regardless of the type of industry, geographic location, technology, regulatory environment or operating history.

Particular areas of focus include organizing end-user SCADA systems standards, work processes for management and operation and a set of standardized workflows for designing, building, operating, maintaining, expanding and auditing SCADA systems.

Graham Nasby - ISA Committee

The ISA112 standard committee was initiated by a core group of experts from the oil/gas, pipeline and municipal water/wastewater sectors who saw a need for an industry-wide standardized framework for managing, designing, building and pricing SCADA systems. Since its inception, the committee has grown to over 350 volunteer experts from around the world representing a multitude of industries, all with the common goal of making SCADA systems easier to design, build, operate and maintain.

“The ISA-112 Part 1 standard has been developed to make it easier for end users to organize their SCADA system standards and communicate to others what their needs and wishes are. The standard also gives system integrators, vendors and consultants a standardized way to execute the design, implementation and ongoing enhancements to SCADA systems,” said Graham Nasby, founding co-chair of the ISA112 committee and systems lead – Eastern Canada at PBX Engineering Ltd. “ISA-112 Part 1 is a testament to ISA’s proven approach to developing consensus-based, vendor-neutral technical standards.”

 Those interested in learning more about ISA-112 Part 1 are invited to register for an upcoming webinar, “ISA-112 Part 1: The New Standard for Modernizing SCADA Systems.” This free webinar is scheduled to take place on 16 April 2026 at 11 a.m. ET.

---

@ISA_Automation @automation_com  @ISAIreland #PAuto  #SCADA 

Statement on European CRA.

The CiA (CAN in Automation) board of directors has released the following statement on the EU Cyber Resilience Act (CRA) and the impact on CAN networks: 

“The nonprofit CiA (CAN in Automation) international users’ and manufacturers’ group informs its members that products using CAN and placed on the EU markets fall under the European Cyber Resilience Act (EU CRA), unless the relevant cybersecurity aspects are covered by application-specific EU legislation. In most cases, the required risk assessment may be a self-assessment, unless the product is considered critical (as defined in the CRA Annex III).

It remains to be seen, which future standards best reflect the EU CRA requirements. For now, suppliers of CAN-connectable devices are requested by their customers to comply with a dedicated SL (security level) as defined in the IEC 62443 standard series (security for industrial automation and control systems).

CiA is confident that SL 2 can often be reached with minimal effort for CAN networks. Achieving SL 3, requires more advanced security measures involving cryptography at CAN data frame (data link layer entity) or CANopen message (application layer entity) level. CiA’s assessment is that CAN networks with restricted and limited physical access usually comply with SL 2 or lower, not needing additional cybersecurity measures. This assumes that gateway functions to other networks and external interfaces are protected by means of firewalls or are made not accessible (e.g., the JTAG interface, named after the Joint Test Action Group).

If restricted and limited physical access is difficult to enforce, cybersecurity measures do not necessarily require cryptography. In CiA’s view, a security monitoring entity that scans communication on abnormal behavior, detecting and reporting attack, is an efficient security measure as indicated in the CRA regulation and the IEC 62443 standard series. It reduces overall risks for undetected attacks, having a positive influence on the risk assessment and showing a defense in-depth approach.

If cryptography is necessary, its use can be limited to core functions. While a secure software update mechanism might be mandatory for CRA compliance, in many cases, further use of security functions can be reduced to secure CAN node authentication and device configuration protection (e.g., by means of passwords). Such core security functions are currently under discussion in the CiA SIG (special interest group) HLP (higher-layer protocol) cybersecurity and expected to be integrated into CANopen CC and CANopen FD specifications.”

---

@CANopen #DigitalEU #Cybersecurity #Standards

International cybersecurity and regulatory requirements achieved.

Innodisk has officially obtained IEC 62443-4-1 certification for its security development lifecycle (SDL).This achievement reinforces Innodisk’s capability to deliver comprehensive security assurance across its product portfolio and product lifecycles, meeting the cybersecurity expectations of global supply chain partners and proactively aligning with upcoming international regulatory requirements such as the EU Cyber Resilience Act (CRA).

IEC 62443-4-1 is a critical standard for securing industrial control systems and critical infrastructure. Unlike product-specific testing, the standard focuses on establishing robust and repeatable secure development processes. Innodisk’s process-level certification spans its full range of offerings, including memory modules, flash storage, edge AI systems, embedded camera modules, firmware, SDKs, and cloud management tools. All products are now developed under standardized procedures covering secure design, threat modeling, vulnerability management, and long-term maintenance, ensuring consistent and reliable protection across every product line and at every lifecycle stage.

The EU CRA has become a defining benchmark for global product cybersecurity standards and is expected to significantly reshape the IoT and edge device landscape. The regulation places explicit responsibility on manufacturers to ensure ongoing vulnerability disclosure, maintenance, and security updates throughout a product’s operational lifetime. The SDL framework required by IEC 62443-4-1 is closely aligned with these obligations, emphasizing security from design and development through deployment and after-sales technical support. By adopting this standard ahead of full CRA enforcement, Innodisk has strengthened its internal security governance and established a standardized framework for secure firmware and software maintenance, further enhancing the reliability of its edge AI solutions.

“As AI adoption accelerates across manufacturing, transportation, healthcare, and smart-city environments, the cybersecurity of edge devices has become a shared challenge across the global ecosystem,” said Yichuan Chen, Senior Manager of Quality Assurance at Innodisk. “Achieving IEC 62443-4-1 certification reinforces Innodisk’s role as a trusted supply chain partner and enables our customers to more easily meet international procurement requirements, ultimately helping accelerate AI adoption and infrastructure modernization worldwide.

"Innodisk will continue to further strengthen its secure development practices and work closely with global ecosystem partners to build a trusted foundation for next-generation edge AI and industrial computing."

---

@Innodisk_Corp @DigitalEU @mepaxIntPR #PAuto #Ai #Cybersecurity

Guidance on security protection.

The International Society of Automation (ISA) has published ISA-TR62443-2-2-2025, Security for Industrial Automation and Control Systems, Part 2-2: IACS Security Protection Scheme.* This technical report is the latest update to the ISA/IEC 62443 series, the widely used global consensus-based automation and control systems cybersecurity standards and technical reports.

Eric Cosman

“ISA‑TR62443‑2‑2 gives asset owners and operators a risk-based approach for day‑to‑day security actions,” said Eric Cosman, ISA99 co-chair. “By bringing together technical controls, process maturity and clear accountability, this guidance based on the ISA/IEC 62443 series of standards can help organizations sustain cyber protection across the entire IACS lifecycle.”

ISA-TR62443-2-2-2025 provides actionable guidance for developing, validating, operating and maintaining a comprehensive security protection scheme (SPS) that safeguards industrial automation and control systems (IACS) in the operating environment. Built upon foundational content from the ISA/IEC 62443 series, the report offers clear models based on established requirements, as well as methods for assessment and validation.

The goal of this document is to ensure the asset owner/operator implementing an IACS security program (SP) has the proper mechanisms and procedures to manage the various risks resulting from cyberthreats to IACS.

---

*ISA-TR62443-2-2-2025, Security for Industrial Automation and Control Systems, Part 2-2: IACS Security Protection Scheme.

@ISA_Automation @automation_com  #Pauto #Cybersecurity

Highest standards in safety.

The ISO 45001 certification has been received by WIKA for its Services division This is an international standard for occupational health and safety management systems. Such a system ensures that all operational processes are harmonised with health and safety in the workplace. Processes are also continuously optimised to this end. It applies both to activities at its own facilities and the various service calls at the customer′s site.

The occupational health and safety management system ensures that risks are systematically identified and minimised during these sometimes challenging assignments. WIKA’s services range from installation, maintenance and repair to calibration and consulting.

“With the ISO 45001 certification of our Field Services, we are sending a clear signal at international level,” says Matthias Bundschuh, Vice President Services at WIKA. “Customers worldwide can rely on the highest safety standards being met during installation, commissioning and maintenance of the instrumentation - whether for new projects or maintenance and repair work as part of service calls.”

The requirements of the ISO 45001 standard include regular audits, employee and management training and the evaluation of safety standards. These measures make it possible to recognise and eliminate potential hazards at an early stage and lead to a continuous improvement in processes with regard to occupational health and safety.

---

@WIKANews #PAuto #Standards

Advancing adoption of cybersecurity standards.

It has been announced that Sword has officially joined both the ISA Global Cybersecurity Alliance (ISAGCA) and ISASecure®. This move shows support for ISAGCA, the collaborative forum dedicated to advancing operational technology (OT) cybersecurity awareness and securing critical infrastructure, as well as the ISASecure certification program that validates conformance to the ISA/IEC 62443 series of standards for industrial automation and control systems (IACS) cybersecurity.

“Joining ISAGCA and ISASecure reflects our commitment to advancing OT cybersecurity through globally recognised standards and independently validated assurance,” said Stuart Townhill, a principal consultant at Sword. “Our customers need clear, consistent ways to measure security maturity and trust their supply chains. ISA/IEC 62443 and the ISASecure program deliver precisely that — actionable requirements, repeatable assessments and transparent credentials.”

Sword works with organisations to maximise the value of investment in IT. This includes industrial and OT cybersecurity services and solutions that help critical infrastructure operators, manufacturers and energy providers reduce cyber risk, improve asset resilience and align with internationally recognised standards. By joining ISAGCA and ISASecure, Sword underscores its commitment to supporting standards-driven security practices across the OT lifecycle from system design and integration to operations and maintenance.

Through ISAGCA membership, Sword will collaborate with global industry leaders to accelerate awareness, adoption and harmonised implementation of the ISA/IEC 62443 standards framework. In parallel, participation in the ISASecure program will enable Sword to support certification pathways that validate products and systems against rigorous, consensus-based cybersecurity requirements, helping end users and suppliers demonstrate trustworthy security capabilities.

“This is an exciting milestone for the community,” said Mark DeAngelo, ISASecure program manager. “Sword brings deep experience in operational technology environments and a strong commitment to measurable, standards-based cybersecurity. Their dual participation in ISAGCA and ISASecure will help scale industry collaboration and drive validated conformance to ISA/IEC 62443 across global sectors.”

As a member of ISAGCA, Sword plans to promote practical guidance, reference architectures and workforce enablement aligned with ISA/IEC 62443. Within ISASecure, Sword will champion best practices for secure development, component and system certification and supplier assurance.

The ISA/IEC 62443 series provides a comprehensive framework for securing IACS, addressing people, process and technology across the ecosystem. ISASecure complements the standards by offering conformance certifications for products, systems and development practices, giving asset owners and integrators confidence in the security posture of their solutions.

Sword’s involvement in both ISAGCA and ISASecure helps accelerate the practical adoption of ISA/IEC 62443-based controls and drive broader market awareness of OT cybersecurity best practices.

---

@Sword_Group @ISA_Automation @automation_com #PAuto #Cybersecurity

Safety and compliance of 5G wireless devices.

The functions of Anritsu's new Radio RF Conformance Test System ME7873NR have been enhanced to support 5G wireless device conformance tests and compliance with the ETSI* EN 301 908-25 standard under the European Radio Equipment Directive (RED).

By using these enhanced functions, manufacturers can ensure regulatory compliance for 5G wireless devices sold in the EU and guarantee product quality and reliability. Anritsu is dedicated to supporting smooth market entry for products into the EU.

RED is an EU legal framework defining the safety, electromagnetic compatibility (EMC), radio-spectrum efficiency, and cybersecurity requirements of wireless devices in the EU. With the spread of wireless technologies, such as 5G, the ETSI EN 301 908-25 standard for 5G NR devices has been established based on 3GPP Release 15 regulating 5G specifications, and wireless products now sold in the EU must comply with this standard.

Through this latest enhancement, Anritsu continues to play a key role in deployment of commercial 5G services, helping create a 5G-empowered society.

Product overview.
The New Radio RF Conformance Test System ME7873NR is a 5G test platform compliant with 3GPP standards and is certified by both the Global Certification Forum (GCF) and PCS Type Certification Review Board (PTCRB).

In addition to supporting Frequency Range 1 (FR1, Sub-6 GHz), combining the system with an OTA (CATR) chamber*2 adds support for Frequency Range 2 (FR2, mmWave). The flexible configuration and customizable design provide an upgrade path from current ME7873LA systems, offering enhanced 5G compatibility at a lower capital cost.

---

* ETSI European Telecommunications Standards Institute. A non-profit organization promoting international standardization of European information and communications technology.

@Anritsu @AnritsuEMEA @ETSI_STANDARDS @NapierPR #Communications  #TandM #EU

Refreshing automation site upgrade.

The news publication for the global automation community, Automation.com, has been relaunched by ISA (International Society of Automation) with a refreshed design and improved site navigation experience based on ISA technical content topics. This upgrade offers a more modern look and feel with advanced search capabilities and more intuitive topic organisation.

“Industrial automation is evolving rapidly, and so are the needs of our readers,” said Rick Zabel, managing director of ISA Publications. “With the newly redesigned Automation.com, we’re making it simpler for automation professionals to access critical information, stay current with industry trends and connect with their global community.”

The updates to Automation.com reflect its continued commitment to delivering timely, relevant, authoritative content to ISA members and non-members alike. The redesigned website features:

• Advanced Search Functionality: Enhanced search tools make it easier and faster for automation professionals to find the news, features, products and guidance they need.
• Modern Look and Feel: The refreshed design offers a clean, modern user experience with improved readability for mobile devices.
• ISA-Related Updates: ISA members can turn to Automation.com for the latest Society news, with a special tag devoted to this purpose.
• Topic-Based Navigation: Site structure and navigation are now organised around ISA technical content topics. Users can browse and drill down by topics of interest — including factory and process control, safety, OT cybersecurity, enterprise architecture and both well-established and emerging technologies — helping them discover content tailored to their needs.

Automation.com’s relaunch aims to foster strong engagement with its readers and deepen the website’s integration with ISA. Together, ISA and the redesigned Automation.com offer invaluable resources for engineers, technicians, plant managers, system integrators and technology providers navigating the digital transformation of industry.

---

@ISA_Automation @automation_com #PAuto #Automation #TandM #Standards

AS9100 Certification award.

Intelliconnect (Europe) has been awarded AS9100 certification, which recognises that the company’s quality management system meets the AS9100 standard, a specialised set of requirements for the aerospace, aviation and other industrial sectors.

AS9100 is based on the general quality standard ISO 9001, with additional aerospace-specific requirements covering such areas as safety, reliability, and regulatory compliance. AS9100 covers the total supply chain and applies to manufacturers, suppliers and service providers in aerospace of any size.

Compliance to the standard demonstrates that a company has proven it follows a globally recognised aerospace-specific quality system, can deliver products that meet customer and regulatory requirements and has processes to prevent defects and manage risks.

To become certified, a company undergoes an in-depth audit by an accredited third-party registrar, and it must be re-audited regularly (often annually) to maintain certification.

The award was presented to Intelliconnect at their Essex, (GB), facility by Michael Venner of Auva Certification Ltd.

Steve Groves, Sales & Marketing Director at Intelliconnect (Europe) Ltd, commented, “We are incredibly proud to presented with this prestigious award. It is a great achievement and demonstrates the commitment of our whole team to maintaining our ethos of manufacturing great products with excellent customer service. Auva Certification were instrumental in ensuring the success of our hard work”

---

@Intelli_Connect @AuvaCert @proactivefleet #Pauto #Quality