Preparing the published article.
Cybersecurity Requirements in Robot Procurement
Add security clauses before you sign, not after an incident.
Clauses worth adding
| Clause | Purpose |
|---|---|
| Unique accounts, no default credentials | Prevents unauthorised program changes |
| Remote access policy | Time-limited, logged vendor access |
| Patch and update process | Keeps controllers supported safely |
| Backup and export formats | Lets you recover and migrate |
| Data location and retention | Defines where production data lives |
| Incident notification | Defines reporting duties and timelines |
Operational practices
- Inventory every controller with IP address and owner.
- Segment the cell network from the office network.
- Back up programs and configurations off the controller, on a schedule.
- Record every program modification with who, when and what was verified.

