Press release, KONE Corporation, May 3, 2023
KONE Corporation, a global leader in the lift and escalator industry, has gained the IEC 62443 cybersecurity certification for its DX class lifts, and ISO 27001 certification for its digital services, including KONE 24/7 Connected Services. These achievements are a first for the global lift and escalator industry.
Johan Boije af Gennäs, Chief Information Security Officer, KONE, says: "We can see a need to enhance cybersecurity as digitalisation increases throughout the industry and the built environment. Solid security practices provide peace of mind for our current and future customers because security is built-in rather than being considered as an afterthought. These certifications are important milestones and a measure of our continuous improvements in cybersecurity and encourage our cross-functional KONE teams to continue the hard work towards better security."
"Quality has always been high on the agenda at KONE, and cybersecurity is becoming an increasingly important part of today's world, where physical and digital are interconnected. We are proud to be the first in our industry to achieve these certificates for the lift controller and our digital services, including KONE 24/7 Connected Services", says Maciej Kranz, Chief Technology Officer, KONE.
To achieve the certifications, KONE underwent rigorous independent audits conducted by third-party certification bodies. The audits evaluated the company's cybersecurity and information security controls and processes, including policies, procedures, technical controls and requirements.
The certifications also demonstrate KONE's commitment throughout its secure development process, including steps such as threat modelling, security testing, and vulnerability management throughout the product lifecycle. KONE also implements around-the-clock security monitoring for its connected digital solutions. This also means that the DX class lift is aligned with the new ISO 8102-20 cybersecurity standard for lifts, escalators and moving walkways, which KONE has been involved in creating, alongside industry peers.
KONE continues to explore and develop the digital possibilities and value created by its DX class lifts, with services such as KONE 24/7 Connected Services and KONE Care DX. By working towards better standards in the industry and continuously developing its own capabilities, the company seeks to help customers build better people flow and more sustainable cities.
For further information, please contact:
Gia Forsman-Härkönen, Senior Communications Manager, KONE Corporation, tel. +358 50 324 30 78, media@kone.com
Read more
Read more about KONE DX Class elevators
For images and videos, visit KONE's Material Bank
Previous press releases are available at https://www.kone.com/en/news-and-insights/releases/ including:
January 21, 2021: KONE announces an open competition to connect almost anything to an elevator
May 7, 2020: KONE DX Class elevators win four prestigious Red Dot Design Awards
November 29, 2019: KONE DX Class elevators take the industry into a new era - the world's first elevator series with built-in digital connectivity as standard
About KONE
At KONE, our mission is to improve the flow of urban life. As a global leader in the elevator and escalator industry, KONE provides elevators, escalators and automatic building doors, as well as solutions for maintenance and modernization to add value to buildings throughout their life cycle. Through more effective People Flow®, we make people's journeys safe, convenient and reliable, in taller, smarter buildings. In 2022 KONE had annual sales of EUR 10,9 billion, and at the end of the year over 60,000 employees. KONE class B shares are listed on the Nasdaq Helsinki Ltd. in Finland. www.kone.com
More information about the International Standards and certification:
ISO 27001 is a management system standard for information security, cybersecurity, and privacy protection. It is a best practice framework to ensure a systematic and risk-based approach to security management. This is especially crucial for customers in the transportation, airports, and utility segments, where security is a critical requirement when choosing a partner to work with.
The International Standard IEC 62443-4-1 defines secure development lifecycle requirements related to cybersecurity for products intended for use in the industrial automation and control systems (IACS). These requirements can be applied to new or existing processes for developing, maintaining, and retiring hardware, software, or firmware.
The International Standard IEC 62443-4-2 defines detailed technical requirements for industrial control system components. The requirements are organized as seven foundational requirements, and each component requirement can be specified at up to four security levels.
