The Linux Foundation | 28 September 2026
CIP becomes one of the first open source projects to achieve this level of compliance, providing a stronger security foundation for industrial and critical infrastructure systems
Summary
- The Civil Infrastructure Platform (CIP) has achieved compliance with IEC 62443-4-1 and IEC 62443-4-2, internationally recognized cybersecurity standards for industrial automation and control systems.
- The milestone provides CIP adopters with security processes, technical capabilities and reusable artifacts designed to reduce the effort required to develop IEC 62443-compliant products.
- The achievement coincides with CIP’s tenth anniversary and builds on a decade of community investment in secure, reliable and sustainable open source infrastructure.
SAN FRANCISCO, Sept. 28, 2026 – The Civil Infrastructure Platform (CIP), a collaborative, open source project hosted by the Linux Foundation, today announced that it has achieved compliance with IEC 62443-4-1 and IEC 62443-4-2. This milestone strengthens the security foundation available to manufacturers and operators building long-lived industrial and critical infrastructure systems. With this achievement, CIP became one of the first open source initiatives to achieve this level of IEC 62443 alignment, demonstrating that open collaboration can deliver enterprise-grade cybersecurity.
As industrial systems become more connected and cybersecurity requirements continue to evolve, manufacturers face growing pressure to demonstrate that security is addressed throughout both product development and operation. IEC 62443 provides an internationally recognized framework for cybersecurity in industrial automation and control systems. CIP’s work addresses two important parts of that framework: IEC 62443-4-1, which defines secure product development lifecycle requirements, and IEC 62443-4-2, which defines technical security requirements for industrial components.
“Industrial and civil infrastructure systems can remain in operation for decades, making long-term security and maintainability fundamental requirements,” said Urs Gleim, Chief Scientist at Siemens and Chair of the CIP Governing Board. “CIP was created to address those challenges collaboratively. This milestone gives manufacturers another way to build on shared, open source infrastructure while supporting the rigorous cybersecurity requirements their products must meet.”
For organizations building on CIP, the work is intended to reduce the amount of foundational compliance activity that must be repeated for each individual product. CIP estimates that adopters can reduce their IEC 62443 compliance effort by up to 70% by building on the project’s security processes, technical capabilities and reusable artifacts, while retaining responsibility for the requirements specific to their own products and deployments.
The achievement comes as CIP celebrates its 10th anniversary. Since its launch, the project has worked to provide a secure, reliable and maintainable open source software foundation for systems with long product lifecycles, bringing together organizations across the industrial and critical infrastructure ecosystem.
A comprehensive look at CIP’s first decade and its ongoing work is available in the CIP blog. To learn more about CIP, contribute to the project or explore membership, visit the CIP website and GitLab community.
About the Civil Infrastructure Platform
The Civil Infrastructure Platform ("CIP") is a collaborative, open source project hosted by the Linux Foundation. The CIP project is focused on establishing an open source "base layer" of industrial grade software to enable the use and implementation of software building blocks in civil infrastructure projects across energy, transportation, smart city, manufacturing, healthcare, and communication infrastructure applications. CIP is supported by key members including Renesas Electronics, Siemens, Toshiba, Texas Instruments, Aronetics, CyberTrust, Hitachi, and MOXA. Visit https://cip-project.org/ to learn more.
About the Linux Foundation
The Linux Foundation is the world's leading home for collaboration on open source software, hardware, standards, and data. Linux Foundation projects, including Linux, Kubernetes, Model Context Protocol (MCP), OpenChain, OpenSearch, OpenSSF, OpenStack, PyTorch, Ray, RISC-V, SPDX and Zephyr, provide the foundation for global infrastructure. The Linux Foundation is focused on leveraging best practices and addressing the needs of contributors, users, and solution providers to create sustainable models for open collaboration. For more information, please visit us at linuxfoundation.org.
For a list of trademarks of The Linux Foundation, please see its trademark usage page: linuxfoundation.org/trademark-usage. Linux is a registered trademark of Linus Torvalds.
Media Contact
The Linux Foundation
pr@linuxfoundation.org