Assessment of the cyber security of elevator systems

In today's digital world, the safety of elevator systems is no longer just a question of mechanics, but also of cyber security.

The Technical Rules for Operational Safety (TRBS) 1115 Part 1 set out clear guidelines for assessing and ensuring the cyber security of elevator systems.

SGS-TÜV Saar supports you in the assessment of cyber security in accordance with TRBS 1115 Part 1.

Why is cyber security important for elevator systems?

Elevator systems are increasingly equipped with digital control systems that communicate via the internet or other networks. This offers numerous advantages in terms of efficiency and functionality, but also increases the risk of cyber attacks. A successful cyber attack on an elevator system can lead to breakdowns and operational disruptions and endanger the safety of users.

Important to know: If the expert from the Approved Inspection Body (ZÜS) also does not have proof that the issue of cyber threats has been addressed in the risk assessment when inspecting the elevator system, he will note a corresponding deficiency in the inspection certificate.

Our experts will support you!

What do you need to do to provide a cybersecurity risk assessment of your elevators?

1. Contact the manufacturer and ask for the necessary information on:

Two-way communication system (emergency call system) and/or
relevant safety devices with interfaces (both internet-based and physical) and
the protective measures to be implemented.

2. Based on this information, carry out a risk assessment according to the following scheme:

Identify and list the interfaces of the elevator's components that can be compromised.
Evaluate whether the component can be influenced by a cyber attack in such a way that a critical state of the system can arise.
It must be taken into account that components, especially safety devices, can be deliberately disabled, triggered or their parameters changed.
Define and document measures.

SGS-TÜV Saar will support you with the assessment as part of a risk analysis.

Important information for creating a risk assessment (in German only)

Bewertung Cyber Sicherheit bei Aufzugsanlagen durch SGS-TÜV Saar

pdf

150.48 KB