Certified SL1 for industrial drives – no hardware redesign
Technologies
C/C++, Microsoft Foundation Classes (MFC), Windows desktop application, role-based access control, audit logging, IEC 62443 compliance processes, vulnerability and penetration testing tools, Mbed TLS, STM Cryptolib, threat modeling (IriusRisk)
Client challenge/business need
Our client needed to certify legacy drives to meet strict EU Cyber Resilience Act and IEC 62443 requirements, ensuring continued access to regulated markets. With hardware and protocols never built for modern cybersecurity, achieving compliance without costly redesigns or usability impacts was a critical strategic goal.
Solution at a glance
Proekspert led risk analysis and security feature design for both drive firmware and the configuration tool. We replaced complex certificate-based architectures with role-based access, strong audit logging, streamlined password authentication, and cryptography optimized for legacy hardware, using Mbed TLS and STM Cryptolib. All compliance delivered via software upgrades.
Results
- Protected revenue and market access. Regulatory compliance secured continued sales in regulated markets, avoiding costly business risks.
- No hardware redesign needed. Security Level 1 achieved purely through software upgrades, saving time, cost, and hassle for all stakeholders.
- Ready for future audits and certifications. Established a repeatable compliance process – future products pass faster, with less effort.
