Bureau Veritas provides SEMI E187 Verification of Conformity Services to assist Semiconductor Equipment Manufacturers in enhancing the Cybersecurity Capability

Oct. 26 2023

The Digital Development Department recently awarded the world's first batch of SEMI E187 compliance certification (Verification of Conformity) to Gallant Precision Machining Co., Ltd and Control Technology Co., Ltd, their certifications were issued by the Bureau Veritas.

Bureau Veritas introduced professional consultancy and Verification of Conformity services for semiconductor equipment manufacturers in 2023, aiming to assist them in complying with SEMI E187 standards. Its professional cybersecurity team possesses extensive skill in OT cybersecurity and IEC 62443 verification, enabling semiconductor equipment manufacturers to plan foundational security life-cycle management methods from equipment design to production and maintenance before installation.

SEMI E187 sets requirements for equipment manufacturers to prioritize considerations in four major areas during the design phase: "Operating System", "Network Security", "Endpoint Protection" and "Information Security Monitoring", comprising a total of 12 security requirements. Bureau Veritas' cybersecurity specialists recommend the following approaches for implementation:

Planning in advance:
Integrating operational technology (OT) cybersecurity into semiconductor equipment design can effectively reduce subsequent modification costs.
Adoption of Regularly Updated Operating Systems and Applications:
During the design phase, equipment manufacturers can choose operating systems that support security updates and incorporate the evaluation and management of security updates into the product lifecycle.
Adherence to Secure Design Principles:
Following secure design principles such as the principle of least privilege and network segmentation can help enhance equipment security.
Conducting Security Assessments:
Security and risk assessments during the design phase can help identify and mitigate security risks. SEMI E187 standards and enhancing equipment security.

Bureau Veritas' cybersecurity team possesses extensive knowledge and experience in OT cybersecurity threats and offers three primary service areas to assist semiconductor equipment manufacturers:

SEMI E187 Security Requirement Training and Consultation:
Providing explanations and training on SEMI E187 requirements, helping the R&D teams of semiconductor equipment manufacturers understand the content.
Equipment Risk Assessment:
Assisting your team in identifying security risks from the perspective of OT cybersecurity threats and jointly discussing and developing security measures and management systems.
SEMI E187 External Auditing and Certification:
Whether you are a semiconductor equipment manufacturer or a semiconductor factory, Bureau Veritas' cybersecurity team can help your company conduct SEMI E187 cybersecurity checkpoints and verification for semiconductor wafer equipment and Automated Material Handling Systems (AMHS) before installation, establishing a secure supply chain.

Bureau Veritas fully demonstrated its commitment to establishing and implementing SEMI E187 standards and enhancing the cybersecurity of its production line equipment. Bureau Veritas will continue to uphold professionalism and contribute to expanding global opportunities for the semiconductor equipment industry.

Get in touchwith us

First name

Last name

Phone (e.g. +1 415-555-1234)

Company

Country / Territory

How can we help you?

Would you like to receive marketing communication from Bureau Veritas?

Yes

INFORMATION NOTICE TO DATA SUBJECTS
Your personal data are collected by Bureau Veritas Consumer Products Services Division (“BVCPS”), through its entity Bureau Veritas Hong Kong Limited (having its registered office at 1/F, Pacific Trade Centre, 2 Kai Hing Road, Kowloon Bay, Kowloon, Hong Kong), as well as the BVCPS affiliate(s) with which you had, have or will have a business relationship or that otherwise decide(s) which of your personal data is collected and how it is used.  A list of BVCPS affiliates is available at: BVCPS Locations (https://www.cps.bureauveritas.com/sites/g/files/zypfnx236/files/media/document/BVCPS%20Locations_20210611_for%20web.pdf)
Your personal data are subject to computer processing in order to respond to your requests and to provide you with additional information about BVCPS services, events or topics that may be of interest to you on the basis of your consent to the processing of your personal data for that purpose (by checking the box below).
Your personal data are intended for use by the relevant business departments of BVCPS and/or their service providers depending on the nature of your requests, as well as by BVCPS IT department.    Your personal data will be retained until the earlier of (a) one year after the last communication, or (b) your request to delete the personal data. 
Your personal data may be transferred outside the European Union, on the basis of your explicit consent, as the data subject, to the proposed transfer. By checking the box below, you are providing your explicit consent to the proposed transfer, with your acknowledgement of the possible risks of such transfer due to the absence of an adequacy decision pursuant to Article 45 of the General Data Protection Regulation of 27 April 2016 or of appropriate safeguards pursuant to Article 46 of the General Data Protection Regulation of 27 April 2016.
In accordance with the French Data Protection Act of 6 January 1978 as amended and the General Data Protection Regulation of 27 April 2016, you may have the right to access, rectify and erase any personal data concerning you, as well as the right to limit the processing, the right to oppose to the processing or the right to portability of your personal data. You have the right to withdraw your consent at any time by connecting to the site or application (https://personaldataprotection.bureauveritas.com). and unchecking the box dedicated to the collection of your consent. You also have the right to set out general and specific guidelines that define how you intend these rights to be exercised after your death. You can exercise your rights by e-mail at the following address: https://personaldataprotection.bureauveritas.com. Finally, you have a right to lodge a complaint to the Commission Nationale Informatique et Libertés (CNIL) or the relevant authorities in your country.
Fields marked with an asterisk must be filled in. Otherwise, BVCPS would not be able to respond to your requests and/or provide you with additional information.