CyberSecurity - CheckList

Ask Questions Other Topics
1

Hello

does it exist a manual or a checklist of tasks to be performed to secure a B&R PLC for CRA?

For example:

  • Check OPC UA server does not allow anonymous connections
  • Check FTP connection is secured
  • Check connection to PLC is secured

Thank you

Marco Sartori

2

Well not exactly a checklist but B&R provides system‑hardening guidance, training, and best‑practice documents that map well to the requirements of the EU Cyber Resilience Act (CRA) here

https://www.br-automation.com/en-gb/academy/online-courses/axis-coupling-with-mapp-motion-soc4171/

For OPC UA server you can do things like

  • Disable anonymous login

  • Enforce certificate‑based authentication.

  • Enable encryption (TLS).

  • Restrict namespaces and exposed variables.

  • Limit endpoints to required security policies only (e.g., Basic256Sha256).

    For FTP you can

    • Use FTPS (TLS‑secured).

    • Restrict user accounts and directories.

    • Disable write access unless strictly necessary.

      And for PLC connection you can
      Use Secure Remote Maintenance or Automation Studio Secure Connection.

    • Enforce certificate‑based authentication.

    • Disable “online change” for unauthorized users.

    • Restrict programming ports to engineering VLAN only.

1 Like
3

thanks Nicolas

is the correct link?

Marco

4

Woops no, this is the correct link.

https://www.br-automation.com/en-gb/academy/online-courses/cyber-security-basics-and-system-hardening-with-automation-studio-soc9901/

Its an online course but I also realized its a paid online course we offer

5

Unfortunately what will be completely CRA compliant is still in the works so I cant provide much more information for now

1 Like