San Francisco, September 28th / PRNewswire / — The collaborative open-source project Civil Infrastructure Platform ( CIP ), under Linux Foundation, announced today that it has met the standards IEC 62443-4-1 and IEC 62443-4-2. This milestone enhances the security foundation for manufacturers and operators building long-life-cycle industrial and critical infrastructure systems. With this achievement, CIP has become one of the first open-source projects to reach this IEC 62443 alignment level, demonstrating that open collaboration can also provide enterprise-level network security capabilities.

As industrial systems become increasingly interconnected, the requirements for network security continue to evolve, placing manufacturers under growing pressure to demonstrate that security is integrated throughout the entire product development and operation process. IEC 62443 provides an internationally recognized framework for network security in industrial automation and control systems. The work of CIP covers two important aspects of this framework: IEC 62443-4-1, which defines the requirements for the security product development lifecycle; and IEC 62443-4-2, which defines the technical security requirements for industrial components.

Siemens, the Chief Scientist, and CIP, the Chairman of the Management Committee, stated: "Industrial and civil infrastructure systems can operate for decades, so long-term security and maintainability are fundamental requirements. The creation of CIP is to address these challenges in a collaborative manner. This milestone provides manufacturers with another approach to develop based on a shared open-source foundation, while meeting the strict cybersecurity requirements that their products must satisfy."

For organizations developed based on CIP, this work aims to reduce the basic compliance activities that each individual product has to repeat. CIP estimates that by utilizing the security processes, technical capabilities, and reusable outcomes of this project, adopters can reduce their IEC compliance workload by up to 70%, while still being responsible for the requirements unique to their own products and deployments.

This achievement came on the occasion of the 10th anniversary of CIP. Since the project's inception, CIP has been committed to providing secure, reliable, and maintainable open-source software foundations for systems with longer product lifecycles, and has brought together various organizations from the industrial and critical infrastructure ecosystems.

For a comprehensive introduction to the first phase of CIP over a period of ten years and its ongoing work, please refer to the CIP blog. To learn more about CIP, contribute code to the project, or explore membership options, visit the CIP website and the GitLab community.

About Civil Infrastructure Platform

Civil Infrastructure Platform ("CIP") is a collaborative open-source project hosted by Linux Foundation. The CIP project focuses on establishing an open-source "foundation layer" for industrial-grade software, to support the use and implementation of software components in civil infrastructure projects. The application areas include energy, transportation, smart cities, manufacturing, healthcare, and communication infrastructure. CIP is supported by main members such as Renesas Electronics, Siemens, Toshiba, Texas Instruments, Aronetics, CyberTrust, Hitachi, and MOXA. For more information, please visit https://cip-project.org.

About Linux Foundation

Linux Foundation is a globally leading open-source software, hardware, standards, and data collaboration platform. The projects under Linux Foundation include Linux, Kubernetes, Model Context Protocol ( MCP ), OpenChain, OpenSearch, OpenSSF, OpenStack, PyTorch, Ray, RISC-V, SPDX, and Zephyr, providing support for global infrastructure. Linux Foundation is committed to applying best practices and meeting the needs of contributors, users, and solution providers in order to create a sustainable open collaboration model. For more information, please visit linuxfoundation.org.

For the trademark list of The Linux Foundation, please refer to their trademark usage page: linuxfoundation.org / trademark-usage. Linux is a registered trademark of Linus Torvalds.

Media Contact

The Linux Foundation