prEN 50742 | Protection against corruption

We will demonstrate how to fulfil the security requirements of the Machinery Regulation (EU) 2023/1230 with regard to protection against corruption, in a practical and reliable manner. The aim is to prevent tampering with and unintended changes to safety-critical software, parameters, and interfaces, ensuring that hazards are reliably avoided.

The draft standard prEN 50742 provides a methodological framework, describing a comprehensive approach that ranges from safety/threat assessment and the determination of suitable protective measures to robust verification. At the same time, we will clarify the classification within the MVO (Annex III, sections 1.1.9 and 1.2.1) and highlight the areas where the regulation is deliberately general, as well as explaining how prEN 50742 translates these into concrete, technically verifiable requirements.

Classification & Scope

• Basic Principles of Industrial Security
• Scope of the draft standard prEN 50742
• Interfaces with the Machinery Regulation (EU) 2023/1230
• IEC 62443 requirements as a supplement or alternative

Cybersecurity Risk Assessment

• Approach based on prEN 50742
• Triggers of Hazardous Situations
• Vulnerability Impact Assessment
• Threat Assessment

Product Requirements

• General Networking Options
• Communication Protocols
• Wired and Wireless Connections
• Security Environment and System Under Consideration (SUC)
• Physical interfaces (USB, Ethernet, card readers, GPIOs, etc.)

Security protection requirements

• Authorisation
• Authentication
• Software integrity
• Physical tampering
• Authenticity requirements

SRSL – Safety-Related Security Level

• Matrix for determining the SRSL
• Exposure Level
• Window of Opportunity
• Attacker Capability
• Attack Potential
• SRSL Levels 0–4 and their requirements

Logging requirements

• Digital evidence
• Accepted logging formats
• Traceability of modifications
• Retention period and protection of a tracing log

Practical examples
of implementing security measures

• Machine manufacturers
• System integrators
• Project managers
• Technical managers
• Software developers
• Technical writers
• Safety officers (SFK, SiFa, etc.)
• Operators of machinery and plant