The IEC 62443 certification covers and, in some cases, even exceeds the requirements of the Cyber Resilience Act (CRA) for products with digital elements that must be applied by December 2027. Nerve is an IIoT platform that provides a secure basis for digitalization projects and IIoT applications.

IEC 62443-4-2 Certification

Presentation of the IEC 62443-4-2 certificate by Alexander Zeppelzauer, Sales Director TÜV TRUST IT (left), to Erwan Sudrat, Director of Product Development at TTTECH Industrial (right). © Copyright TTTECH Industrial

Industrial companies need connectivity and digitalization to optimize their assets and offer new services, such as predictive maintenance or remote service to their customers. However, connectivity on the shop floor, to the cloud and between companies increases the risks of cyberattacks.

The requirements of NIS2 and the Cyber Resilience Act (CRA) extend manufacturers’ liability for cybersecurity across the entire product lifecycle. TTTECH Industrial has been placing cybersecurity at the forefront for years. In December 2025, TTTECH Industrial’s IIoT platform Nerve has been successfully certified according to IEC 62443-4-2, the industrial cybersecurity norm’s substandard that covers IT security for industrial automation systems.

IEC 62443 is a set of international industrial cybersecurity standards. After achieving certification of its framework for secure product development and lifecycles, the product certification of TTTECH Industrial’s IIoT platform Nerve according to IEC 62443-4-2 was the next logical step. The Industrial Security Competence Center at TÜV Austria GmbH has successfully certified both the software development process for the product based on IEC 62443 4-1 Maturity Level 3 and the product itself in accordance with IEC 62443 4-2. So far, only a few companies have achieved this product level certification from TÜV, an independent and internationally recognized certification body.

Herbert Hufnagl, Senior Vice President Industrial, TTTECH: “Nerve provides a secure basis for customers’ IIoT projects now and in the future, so that they only need to focus on their own applications. This makes it easier to securely implement digital services, remote connectivity, and securely encapsulate legacy applications.” © Copyright Nicky Webb Photography

“Cybersecurity is no longer a side topic. It has become a central question for our customers and partners, especially since the CRA has come into effect and must be implemented by all companies in less than two years,” says Herbert Hufnagl, Senior Vice President Industrial, TTTECH.

Nerve is a platform solution that can run on any industrial PC and enables companies to securely establish remote access to machines, roll-out updates of applications and workloads, process data at the edge, and transfer it to the cloud. The centralized Management System can run in the cloud or on-premises, but the platform also allows offline operation if required to ensure full control over sensitive data. Other features relevant for the CRA include role-based user and authorization management, secure remote access, extensive logging mechanisms to monitor system integrity, and encryption of all data transmissions between edge and cloud with Transport Layer Security (TLS) 1.2.

Product certification according to IEC 62443-4-2 confirms that Nerve is subject to continuous monitoring and upgrades that ensure cybersecurity features are always up-to-date. Customers using Nerve can thus ensure their own systems are compliant with the CRA, reducing legal and operational risks.

Herbert Hufnagl highlights the benefits for customers: “Nerve’s IEC 62443-4-2 product-level certification is a guarantee for our customers. As IEC 62443 covers and, in some cases, even exceeds the requirements of the CRA, customers can be assured that Nerve provides a secure basis for their IIoT projects now and in the future, so that they only need to focus on their own applications. This makes it easier to securely implement digital services, remote connectivity, and securely encapsulate legacy applications and takes away some of the pressure inherent in compliance with EU regulations.”

Aside from its key market segment machine builders, Nerve can also be used as a platform solution for applications in other industries – e.g., in the energy sector, where it is already as basis for TTTECH Zyne’s real-time platform connecting industrial companies and energy suppliers that was introduced in early 2025.

TTTECH Industrial