San Francisco – September 28, 2026 -- The Civil Infrastructure Platform (CIP), an open source project hosted by the Linux Foundation, has achieved compliance with IEC 62443-4-1 and IEC 62443-4-2, becoming one of the first open source initiatives to reach this level of industrial cybersecurity alignment.
CIP compliance cuts adopter security work by up to 70%
CIP estimates that manufacturers building on its security processes, technical capabilities and reusable artifacts can reduce their IEC 62443 compliance effort by up to 70%, while retaining responsibility for requirements specific to their own products and deployments.
Standards cover both product lifecycle and technical security requirements
IEC 62443-4-1 defines secure product development lifecycle requirements, while IEC 62443-4-2 sets technical security requirements for industrial components. Together, the two standards form part of the internationally recognized IEC 62443 framework for cybersecurity in industrial automation and control systems.
Milestone lands as CIP marks its tenth anniversary
The compliance achievement coincides with CIP's 10th anniversary, capping a decade of community investment aimed at delivering a secure, reliable and maintainable open source software foundation for systems with long product lifecycles.
Urs Gleim, Chief Scientist at Siemens and Chair of the CIP Governing Board, said industrial and civil infrastructure systems can remain in operation for decades, making long-term security and maintainability fundamental requirements that CIP was created to address collaboratively.
Key members span electronics, industrial and cybersecurity sectors
CIP is supported by members including Renesas Electronics, Siemens, Toshiba, Texas Instruments, Aronetics, CyberTrust, Hitachi and MOXA, spanning energy, transportation, smart city, manufacturing, healthcare and communication infrastructure applications.