Security-ready for CE marking

The EU Machinery Regulation (EU) 2023/1230 sets out mandatory requirements for Industrial Security. For igm Robotersysteme, an international robotics  and plant engineering company, it was clear at an early stage: without a structured Security concept, there will be no more CE mark in future.
The increasing connectivity of plant and machinery not only raises the level of automation, but also increases the attack surface for cyber threats. In future, safety-related control systems in particular must be verifiably protected against tampering, whether intentional or unintentional. In order to take a targeted approach to these challenges, igm Robotersysteme decided to collaborate with Pilz, seeking professional advice on Industrial Security.

As part of the Security Services programme, Pilz’s experts worked with igm, and started by analysing the existing machine structures. The aim was to identify the assets requiring protection, evaluate potential threats and therefore establish the actual security risks. Particular attention was paid to the interface between IT and operational technology, as well as to safety-related control systems.
The result of the analysis was a tailor-made Industrial Security concept, which brings together organisational and technical measures. At the same time, awareness of security was raised within the company, and it was clearly established that security is not a one-off project, but a continuous process spanning the entire lifecycle of the machinery.
Thanks to its structured approach, igm is now in a position to implement the forthcoming legal requirements in a targeted manner and to supply safe, secure and CE-compliant machinery in the long term.

Benefits at a glance

• Early implementation of the requirements of the new EU Machinery Regulation 
• Systematic evaluation of security risks on plant and machinery
• A clear foundation for CE compliance, secure products and long-term updates 

Customer statement

igm Robotersysteme AG is a global manufacturer of automated welding and cutting systems. The company develops and builds customised robot cells, as well as complete production lines for industrial applications. With subsidiaries and distribution partners in numerous countries, igm is one of the technology leaders in automated welding technology.

Two services – Individually or as a powerful duo

With the Security Evaluation of Machinery and Security Assessment of Machinery services, Pilz offers a tiered portfolio designed to evaluate and improve the cybersecurity of machinery.

The Security Evaluation of Machinery enables a structured snapshot of the security status – both for existing plant and during the procurement process. Vulnerabilities are identified, critical resources analysed and risks evaluated on the basis of their impact and probability of occurrence. The findings are summarised in an overview report, which categorises the security situation, illustrates specific risk reduction measures and determines the need for further analysis.
The Security Assessment of Machinery goes one step further and is aimed in particular at highly networked and safety-critical systems. Based on a structured approach in accordance with IEC 62443, a detailed analysis of the OT environment is carried out in order to accurately assess vulnerabilities and their potential impact. On this basis, targeted measures and strategies are developed to reduce risks sustainably and protect machinery effectively against cyber manipulation.

Together, these two services provide transparency, security and a solid foundation for well-informed decisions.

• Further information on SEM and SAM