← Directory / PLC copilots
Siemens Industrial Copilot / Eigen Engineering Agent
Siemens AI assistant generating and explaining TIA Portal code via Azure OpenAI.
ScoreInsufficient data
Unknown7/12
TypeVendor
Last checked2026-10-16
12-point checklist
| # | Criterion | CISA | Score | Evidence |
|---|---|---|---|---|
| C1 | Actuation capability 2 pts if: Cannot write/actuate, or writes are clearly isolated | P2, P4 | generates code user can integrate into TIA project (dex.siemens.com product page) | |
| C2 | Read-only by default 2 pts if: Write/method tools off unless explicitly enabled | P4 | Not documented publicly / not yet verified | |
| C3 | Write guardrails 2 pts if: Per-tag allowlist plus value/rate limits or interlock checks | P4 | Not documented publicly / not yet verified | |
| C4 | Human-in-the-loop approval 2 pts if: Critical writes need explicit human confirmation | P4 | user chooses to integrate results into the project (dex.siemens.com) | |
| C5 | Authentication 2 pts if: Authenticated sessions to the OT endpoint; no anonymous default | P3, P4 | Not documented publicly / not yet verified | |
| C6 | Encryption & cert verification 2 pts if: Encrypted transport with server certificate verification | P4 | Not documented publicly / not yet verified | |
| C7 | Audit logging 2 pts if: Every agent call/write logged durably | P3, P4 | Not documented publicly / not yet verified | |
| C8 | Network placement 2 pts if: On-prem/edge/air-gapped or push/DMZ flow; no inbound IT→OT path | P2, P4 | Industrial AI Suite runs on Siemens Industrial Edge (product page) | |
| C9 | Data leaving the site 2 pts if: No telemetry; plant data can stay on-prem | P2 | input not persisted in cloud and not used for training, but processed via Azure OpenAI (Siemens Engineering Copilot TIA datasheet; Siemens/Microsoft press release) | |
| C10 | Fail-safe & safety independence 2 pts if: Fails closed; safety systems stay independent | P4 | Not documented publicly / not yet verified | |
| C11 | Vendor security disclosure 2 pts if: Published security policy / PSIRT | P3 | security/PSIRT page live: https://www.siemens.com/global/en/products/services/cert.html | |
| C12 | Supply-chain hygiene 2 pts if: Versioned/signed releases; pinned installs | P3 | Not documented publicly / not yet verified |
Sources
- https://www.dex.siemens.com/industrialsoftware/automation-software/engineering-copilot-tia-essential-self-service
- https://press.siemens.com/global/en/pressrelease/siemens-and-microsoft-partner-drive-cross-industry-ai-adoption
- https://www.siemens.com/global/en/products/automation/topic-areas/industrial-ai.html
- CISA et al., Principles for the Secure Integration of AI in OT (Dec 2025)