In the realm of industrial cybersecurity, Volkswagen Group’s industrial control systems and production planning departments have jointly developed two applicable documents (also knowns as MgUs – mitgeltende Unterlagen), outlining cybersecurity requirements for suppliers in procurement and production phases.

• The first document focuses on IT security requirements for systems and components within production environments. It defines essential standards on information and IT security for the release of components and systems.
• The second document addresses IT security within production plants, delineating requirements for information security during the procurement and integration of new manufacturing plants, machinery and related infrastructure, including necessary tools like IT equipment. 

Compliance with both documents is mandatory and the requirements are also enshrined in Volkswagen’s industrial cybersecurity guidelines, which stipulate that Volkswagen’s information security requirements must be adhered to during planning and construction phases of plants and systems as well as during component selection and procurement.

These requirements are aligned with current IT security best practices, and manufacturers are required to incorporate IT security considerations into their development processes.