Certified processes for development of cyber-secure embedded applications

The company’s certified development and support processes demonstrate that cybersecurity is an integral part of all development phases from the outset. The tech stacks, consisting of a computer-on-module, licensed operating systems such as Ubuntu Pro and ctrlX OS, as well as software building blocks such as conga-connect (aReady.IOT) and conga-zones (aReady.VT), are based on audited development and support processes. This is also an important prerequisite for OEMs seeking to place electronic devices on the EU market, making it easier to meet the upcoming regulatory requirements of the Cyber Resilience Act (CRA), which becomes mandatory from 11 December 2027.

“By achieving IEC 62443-4-1 certification, we are demonstrating in accordance with internationally applicable guidelines, that we integrate cybersecurity consistently and verifiably into our development and support processes,” Konrad Garhammer, COO & CTO of congatec explains. “This gives our customers application-ready embedded building blocks and tech stacks based on certified development and support processes. It further supports integration into their own applications, simplifies security verification for customers and regulatory authorities, and creates a robust foundation for CRA-relevant compliance processes.”

“Our tech stacks developed in accordance with IEC 62443-4-1, including licensed operating systems, hypervisor and IoT connectors, help customers build their own compliance and security evidence more efficiently and simplify and accelerate certification work,” Dominik Ressing, CEO of congatec adds. “Companies, already relying on our building blocks today are positioning themselves early and efficiently for the requirements of the CRA and comparable regulatory frameworks.”

For further information, please visit:

https://www.congatec.com/en/security-by-design-congatec/

https://www.congatec.com/en/technologies/security/