Cybersecurity Compliance
Since last year, DTBird cybersecurity compliance has been strengthened through the implementation of an organizational cybersecurity policy. This policy aims to improve the security of the DTBird and DTBat systems across all operational stages. Several internal procedures were updated to ensure that the company meets current international requirements for industrial and communication systems.
Implementation of IEC 62443 requirements
One of the main improvements is the fulfillment of IEC 62443, a widely used international standard that applies to industrial automation and control systems, including those used in wind farms. This standard provides guidelines to protect devices, communication networks and critical operational components. For reference, IEC 62443 is described by the International Society of Automation (ISA).
DTBird adopted these requirements to enhance resilience against cybersecurity threats. As a result, several processes were introduced, such as secure configuration procedures, user access control, periodic audits and risk-based analyses.
Company-wide technical alignment
To ensure consistent implementation, all company areas were technically aligned. This includes Human Resources, where employee selection and cybersecurity awareness programmes were reinforced. It also includes the Engineering and R&D departments, which updated internal documentation and software development practices.
In addition, the Production area implemented secure procedures for hardware preparation and system configuration. These actions help prevent vulnerabilities and improve system hardening.
Hardening of DTBird and DTBat systems
The cybersecurity work also focused on the hardening of the DTBird and DTBat systems. All hardware components were reviewed and updated following the new security guidelines. This includes secure firmware management, protection of communication interfaces and improvements in the validation of system integrity. As a result, DTBird cybersecurity compliance now covers the full operational chain, from system design to field deployment and ongoing maintenance.
A continuous improvement process
Cybersecurity is a continuous process. Therefore, DTBird plans to carry out regular reviews, training sessions and updates to maintain compliance with IEC 62443 and other emerging standards. These measures help improve long-term security and support the safe operation of systems installed in onshore and offshore wind farms.
