Bureau Veritas Supports ARBOR Technology in Achieving IEC 62443-4-1 Certification

As industrial computers and edge computing devices become more connected and intelligent, product cybersecurity must extend beyond individual functions or systems. Security needs to be embedded throughout the product lifecycle, from design and development to testing, updates and maintenance.

For manufacturers serving global markets, integrating cybersecurity from the earliest stages of R&D and demonstrating secure development capabilities against internationally recognized standards are important steps in building customer confidence and supporting market access.

Bureau Veritas has completed an IEC 62443-4-1 Secure Product Development Lifecycle assessment for ARBOR Technology. ARBOR Technology has achieved IEC 62443-4-1 Maturity Level 2 (ML2) certification, validating its secure development processes and commitment to product cybersecurity. The certification also supports the company’s ability to meet global cybersecurity expectations and market requirements.

Managing Secure Product Development with IEC 62443-4-1

IEC 62443 is an international series of cybersecurity standards for Industrial Automation and Control Systems (IACS). IEC 62443-4-1 focuses on the secure development lifecycle for products used in IACS environments. It covers security requirements, secure design and implementation, security verification and validation, defect management, product updates and ongoing maintenance.

Implementing IEC 62443-4-1 enables cybersecurity requirements to be integrated across the product lifecycle. It brings security considerations into the early stages of product development and supports consistent development and management processes that improve product security and reliability.

By embedding cybersecurity into its development processes, ARBOR Technology has incorporated security requirements into its R&D framework. This strengthens security management across requirements analysis, design, development, verification, testing and maintenance, while providing a more structured framework for product cybersecurity governance.

ARBOR Technology: Cybersecurity Is a Responsibility to Customers

ARBOR Technology noted that its industrial computing solutions are often used as critical components of industrial infrastructure. A robust cybersecurity management framework during development can help reduce the risk of cyberattacks after deployment, enabling customers to focus on their core operations.

ARBOR Technology’s General Manager, Clark Lien stated:
“Cybersecurity should not be an additional safeguard added only after a product is completed. It should be a responsibility undertaken from the very first day of development. Achieving IEC 62443-4-1 certification demonstrates that our development processes have been validated against international standards. When customers adopt ARBOR products, they can have greater confidence in entrusting cybersecurity considerations to us and focus on what matters most to their business.”

Deloitte: Establishing a Comprehensive Secure Development Framework to Strengthen Cybersecurity Incident Response and Defense Capabilities

Howard Jyan, the Partner of Technology & Transformation Service at Deloitte Taiwan noted that with increasingly stringent cybersecurity regulations, a comprehensive risk assessment and secure development framework has become a core requirement for industrial control systems entering international supply chains.

Through this engagement, cybersecurity requirements, including requirements analysis, threat modeling, secure design, testing and verification, were integrated into ARBOR Technology’s existing R&D framework. The project also established mechanisms for Software Bill of Materials (SBOM) management, vulnerability tracking and periodic assessment.

With obligations under the EU Cyber Resilience Act (CRA) for manufacturers expected to apply from September 2026, companies can build on existing IEC 62443-4-1 processes to strengthen cybersecurity risk management across the product lifecycle. This can improve their ability to prevent and respond to cybersecurity threats, align their cybersecurity framework with European regulatory requirements and prepare for changing compliance obligations.

Bureau Veritas: Supporting Global Market Access

David Hsueh, Head of Cybersecurity Sales, Bureau Veritas Consumer Products Services, Taiwan, said:
"The value of IEC 62443-4-1 goes beyond demonstrating that a company’s secure development processes comply with international standards. More importantly, it helps organizations embed product cybersecurity requirements into their R&D and product lifecycle management processes. As cybersecurity requirements continue to evolve, establishing a sustainable and continuously operating secure development framework will be a key foundation for enhancing product reliability, meeting international cybersecurity regulatory requirements, and strengthening competitiveness in global markets."

This certification marks a milestone in ARBOR Technology’s secure product development journey and reflects its commitment to embedding cybersecurity throughout the product development lifecycle.

Through its global testing, inspection and certification expertise, Bureau Veritas supports organizations in addressing cybersecurity requirements, strengthening product security and compliance, and building trust in a connected world.