SIGNAL+DRAHT | Ausgabe 05/2025
Secure software development practices for the compliance of railway applications with IEC 62443
Security in product development cannot be considered in isolation: it requires a well-defined framework where all the stakeholders collaborate effectively. The IEC 62443 series of standards provides a structured approach by assigning roles and responsibilities to the asset owners, integrators and product developers in technological operating environments. This article explores the key aspects of stakeholder involvement, risk management, secure coding and DevSecOps (Development Security and Operation) practices, thereby demonstrating how compliance with IEC 62443 strengthens cybersecurity, particularly in railway systems...