Cybersecurity is rapidly becoming a prerequisite for doing business in industrial automation. End users increasingly require systems that can demonstrate compliance with recognized standards, and machine builders are under growing pressure to provide documented proof of security.
With the release of WebIQ 2.21, one of our partners successfully achieved the IEC 62443-4-2 certification. A key contributor to this achievement was WebIQ's built-in auditability and security traceability features, which helped provide the documented evidence required during the certification process.
IEC 62443-4-2 certification requires documented evidence of security controls, event handling, user management, and system integrity. Collecting and presenting this information can become a significant effort during audits. For our partner, demonstrating traceable security events and providing auditable records was a key requirement.
A critical requirement of IEC 62443-4-2 is the ability to demonstrate who did what, when it happened, and how security-relevant events are handled. The new Audit Log in WebIQ Runtime Manager provides this traceability by:
Automatic recording of security-relevant events
Detailed user and session traceability
Searchable audit records
Export to auditors, SIEM systems, and monitoring platforms
Protected log storage ensuring integrity
Rather than relying on manual processes, the customer could provide auditors with structured and verifiable evidence directly from the system.
Achieving IEC 62443-4-2 certification was about more than passing an audit.
For our partner, certification provides documented proof of cybersecurity capabilities, helping them meet customer requirements, participate in projects with stricter security demands, and differentiate themselves in an increasingly competitive market.
By leveraging the auditability and security traceability delivered by WebIQ 2.22, the certification process became more efficient and evidence-based.
IEC 62443-4-2 certification is achieved at the system level, but every certification project starts with the components used to build that system. With WebIQ 2.22, customers gain access to security capabilities designed to support compliance efforts and simplify the path toward certification.
The successful certification of our first partner demonstrates how modern HMI platforms can do more than secure industrial applications. They can help customers meet evolving cybersecurity requirements, reduce compliance effort, and create new business opportunities.
Cybersecurity is an ongoing commitment. Our new Security Center provides customers with a dedicated resource for security advisories, vulnerability reporting, and product security updates, helping you stay informed and build more resilient automation solutions. Visit the Security Center here.
Download WebIQ version 2.21 here.