Applus+ Laboratories certifies IED’s secure development process under the IEC 62443‑4‑1 standard

About IED 

IED Company is a technology company specialized in the design and development of industrial electronic solutions that operate in environments where continuity and security are critical. With the aim of strengthening cybersecurity at the product design stage, the company decided to certify its secure development process in accordance with IEC 62443‑4‑1, an international standard that defines the practices required to integrate cybersecurity into the industrial product development lifecycle. 

The challenge 

IED sought to demonstrate that its development process incorporates robust mechanisms to ensure security from the earliest stages of the product lifecycle. This included areas such as requirements analysis, secure design, verification, vulnerability management, update management, and secure maintenance. In addition, this step was strategic in preparing for future product certifications in accordance with IEC 62443‑4‑2, which requires a mature process aligned with 4‑1 as a starting point. 

Secure development process certification in accordance with IEC 62443‑4‑1 

Development process Gap Analysis 

Applus+ Laboratories carried out a detailed analysis of IED’s development process, comparing it against the requirements defined by IEC 62443‑4‑1. The report clearly identified the existing maturity level (Maturity Level II), as well as the areas that needed to be strengthened to ensure proper alignment with the standard. The standard includes 47 requirements that the company’s procedures must meet, and Maturity Level II includes, for example, development management based on written policies or evidence of staff expertise and training, among other aspects. 

Technical advisory during preparation 

During this phase, our team provided specialized technical advisory to facilitate interpretation of the standard’s requirements, quickly identify existing gaps, and offer continuous guidance throughout the entire process. 

Thanks to this guidance, IED was able to prepare for its assessment with confidence and with a well‑structured view of security across its development lifecycle. 

Accredited assessment under the IECEE CB Scheme 

The development process was assessed under the IECEE CB Scheme, using internationally recognized criteria that ensure rigor, traceability, and consistency in the review against IEC 62443‑4‑1 requirements. 

IEC 62443‑4‑1 certification 

After completing the assessment, IED obtained the IEC 62443‑4‑1 certification, which confirms that its development process integrates cybersecurity practices aligned with one of the most widely recognized standards in the industrial sector.

Commitment to secure development in line with international standards

IEC 62443‑4‑1 certification demonstrates IED’s commitment to secure and structured development. The combination of analysis, specialized technical guidance, and accredited assessment made it possible to consolidate a robust process aligned with international industrial cybersecurity best practices. 

“For Applus+ Laboratories, IED’s IEC 62443‑4‑1 certification represents an important step in consolidating our industrial cybersecurity strategy. We appreciate the trust placed in our team to assess and strengthen its secure development process.” — José Ruiz, Director of the Cybersecurity Business Unit, Applus+ Laboratories. 

“Our collaboration with Applus+ Laboratories helped us structure and validate our secure development process in accordance with IEC 62443‑4‑1. The clarity of their explanations, the depth of the analysis, and the continuous guidance were consistent throughout and helped us approach the certification with full confidence.” — Carlos Martín, CBDO, IED Company. 

From Applus+ Laboratories, we contribute our technical expertise and the rigor of our assessment processes throughout the entire path to certification. Our approach, based on international standards and recognized assessment schemes, allows us to consistently contribute to the development of secure, robust products and services aligned with cybersecurity best practices.