Microchip Technology has received international certification for its security development process in the field of industrial automation and control systems. The IEC 62443-4-1 ML2 certification obtained by the company does not evaluate the function or performance of a specific product, but rather verifies that the development system, extending from design to implementation, verification, and maintenance, operates in accordance with international security standards.

Microchip announced through an announcement at its U.S. headquarters on April 2 that UL Solutions had obtained IEC 62443-4-1 Maturity Level 2 certification. The press release distributed in Korea is dated April 7. The company explained that this certification applies to the entire new product development process and that it received external verification confirming that its products are being developed under a mature and repeatable cybersecurity framework.

IEC 62443-4-1 is a standard that addresses the security development lifecycle (SDL) requirements for industrial automation and control systems. Key items include threat modeling, security design practices, implementation controls, verification and validation, and defect and patch management. This certification also did not assess the safety of a single chip or component, but rather examined whether these standards were consistently applied to the overall development process of hardware and software.

The reason this certification is attracting attention is the European Union's cyber resilience law. The European Commission explains that the CRA applies common cybersecurity requirements to 'products with digital elements,' including hardware and software, and assigns manufacturers security responsibility throughout the product lifecycle. The law entered into force on December 10, 2024, and key obligations will take effect on December 11, 2027. Reporting obligations will take effect first on September 11, 2026.

This certification is seen as evidence that Microchip has reorganized its development process into an externally verifiable framework to meet strengthening industrial security requirements and regulatory changes. For customers, it can serve as a reference standard for checking supply chain security levels during the component adoption process and can also be considered when preparing for future CRA compliance.