Functional Safety Certification for Planetary Rovers: IEC TR 63069 Explained

Date
2027-07-13
Location
Online
Host
Zach L

About this event

A Design Review Session for R&D Teams pursuing functional safety certification. A live 30-minute design review session on IEC TR 63069 (Safety and Security Convergence) for planetary rovers, built for r&d teams pursuing functional safety certification. What We'll Cover: What IEC TR 63069 (Safety and Security Convergence) requires and how its scope applies to planetary rovers Mapping IEC TR 63069 clauses to the certification evidence assessors expect System-specific hazards and safety functions typical of planetary rovers Common findings that delay certification, and how to avoid them A practical readiness roadmap for r&d teams preparing for assessment Related topics: IEC TR 63069 · Planetary Rovers · functional safety certification · functional safety assessment · Design Review Session · R

Topics

Registration

View event page

About IEC TR 63069 (Safety and Security Convergence)

This event covers the compliance, engineering, and verification requirements defined by IEC TR 63069.

IEC TR 63069 provides guidance on applying IEC 61508 functional safety and IEC 62443 cybersecurity together in industrial automation, resolving lifecycle interactions so that neither discipline undermines the other.

What it regulates

Coordination principles: protecting safety functions within secure zones, managing conflicting requirements, and coordinating risk assessments and incident response across safety and security teams.

Who must comply

Organizations running both safety and security programs for IACS — asset owners, integrators, and suppliers aligning SIL-rated systems with 62443 zones and conduits.

Key requirements of IEC TR 63069

  • Framework mapping the safety lifecycle to the security lifecycle
  • Guiding principles including protection of safety implementations by security countermeasures
  • Guidance on co-engineering, roles, and communication between disciplines
  • Treatment of security-relevant events as potential initiators of hazardous events

Key concepts: IEC TR 63069

Security environment for safety
The concept that every safety function must operate inside an adequately secured zone.
Co-engineering
Joint, coordinated engineering of safety and security requirements rather than sequential or siloed treatment.
Conflict resolution
Structured handling of cases where a security measure (like lockout after failed logins) could impede a safety action, and vice versa.
Threat-risk vs hazard-risk assessment
Parallel assessments whose results must be reconciled because attacks can trigger hazards.

Frequently asked questions: IEC TR 63069

Can a cyber attack invalidate a SIL rating?

Effectively yes: SIL calculations assume failure behavior that a deliberate attack can bypass. That is why 63069 requires safety systems to sit within zones whose security level is chosen considering the safety impact of compromise.

Is IEC TR 63069 certifiable?

It is a Technical Report giving guidance, not a certifiable requirements standard; conformity claims remain against IEC 61508 and IEC 62443, with 63069 shaping how the two programs interlock.

Standard information based on the published text of IEC TR 63069 (Safety and Security Convergence). Event content is provided by the host. For authoritative guidance, consult the official standard body.