Why OT Cybersecurity Matters

Modern factories rely on connected PLCs, HMIs, SCADA systems, networks and edge devices to maintain productivity and efficiency. While these connected systems provide greater visibility and control, they also introduce new cyber risks.

Potential threats include:

• Unauthorised access to industrial equipment
• Malware and ransomware attacks
• Firmware manipulation
• Communication interception
• Denial-of-Service (DoS) attacks
• Loss of production data
• Production downtime
• Intellectual property theft

Protecting industrial assets requires a layered cybersecurity strategy that spans the entire lifecycle of industrial equipment—from secure product development through to ongoing maintenance and vulnerability management.

Supporting IEC 62443 Compliance

IEC 62443 is the internationally recognised cybersecurity standard for Industrial Automation and Control Systems (IACS).

Mitsubishi Electric develops many of its Factory Automation products using secure development processes aligned with IEC 62443-4-1 while implementing security functions that support IEC 62443-4-2 requirements.

These standards focus on:

• Secure product development
• Risk assessment
• Secure coding practices
• Security testing
• Vulnerability management
• Security updates throughout the product lifecycle

By incorporating these principles into product development, manufacturers can simplify the implementation of secure industrial systems.

Security Features Built into Mitsubishi Electric FA Solutions

Mitsubishi Electric incorporates multiple security technologies into selected Factory Automation products to reduce cyber risk and improve operational resilience.

User Authentication

Restrict system access to authorised users using role-based authentication to prevent unauthorised changes and improve accountability.

Secure Firmware Updates

Maintain system integrity through authenticated firmware updates that help protect against newly discovered vulnerabilities.

Secure Boot & System Integrity

Verify the integrity of trusted firmware at startup to help prevent malicious software from executing on industrial controllers.

Encrypted Communications

Protect data travelling across industrial networks using encrypted communications to reduce the risk of interception or tampering.

Event Logging

Maintain detailed event histories that assist with auditing, troubleshooting and incident investigations.

IP Filtering & Network Protection

Control device communications via IP filtering and bandwidth management to help defend against unauthorised access and network-based attacks, such as DoS attacks.

Backup & Recovery

Protect valuable configuration data through secure backup and restore functionality, reducing downtime following incidents.

Preparing for the European Cyber Resilience Act (CRA)

The European Cyber Resilience Act introduces mandatory cybersecurity requirements for products with digital elements sold within the European market.

Manufacturers will be expected to demonstrate secure product development, vulnerability management and ongoing security support throughout the product lifecycle.

Mitsubishi Electric’s approach to secure development, vulnerability response and product security aligns closely with these evolving requirements, helping customers prepare for future compliance obligations.

Comprehensive OT Security Solutions

Cybersecurity extends beyond individual devices.

Mitsubishi Electric offers comprehensive OT security solutions covering every stage of the security journey:

• Security assessments
• Vulnerability identification
• Network segmentation
• Industrial firewall solutions
• Secure remote access
• Network monitoring
• Threat detection
• Security consulting
• Ongoing operational support

This holistic approach helps manufacturers improve visibility, minimise cyber risk and maintain reliable production operations.

Key Benefits

• Improve cybersecurity across industrial environments
• Support compliance with IEC 62443 best practices
• Prepare for evolving global cybersecurity regulations
• Reduce operational risk and downtime
• Protect production data and intellectual property
• Strengthen network resilience
• Secure connected manufacturing systems
• Support long-term digital transformation initiatives

Secure Your Manufacturing Environment

Whether you’re modernising an existing production facility or designing a new industrial automation system, Mitsubishi Electric Factory Automation solutions provide the cybersecurity features and OT expertise needed to help protect your operations.

Contact our team to discuss how Mitsubishi Electric and Adroit Technologies can help strengthen the cybersecurity of your industrial automation environment.

Already  Compliant

• MELSEC MX Controller (MX-R models)
• MELSEC MX Controller (MX-F model)
• GOT3000 Series

Planned Certified Products

Mitsubishi Electric is progressing compliance with the European Cyber Resilience Act (CRA) across its Factory Automation portfolio. Planned compliant products include:

PLCs (Programmable Logic Controllers)

• MELSEC iQ-R Series
• MELSEC iQ-F Series

HMIs (Human Machine Interfaces)

• GOT2000 Series

Planned compliance date: 27 October (as stated in the Mitsubishi Electric roadmap). Models not listed are currently not applicable or remain under consideration