SEMI E187 Fab Equipment Cybersecurity Consulting
Start from the security system you already run, then get the evidence and certification application ready
SEMI E187 (Specification for Cybersecurity of Fab Equipment) was published by SEMI in January 2022 and is the first international standard whose development was led by SEMI Taiwan. SEMI describes it as basic rules to follow when developing cybersecurity protections for semiconductor equipment, and companies can also use it as cybersecurity requirements in equipment procurement contracts. Winners Consulting helps equipment suppliers check scope, close evidence gaps and prepare for Taiwan's SEMI E187 certification scheme.
Apply for a free mechanism diagnosisWhat does SEMI E187 cover?
According to SEMI, E187-0122 covers the design, operation and maintenance of semiconductor production equipment and automated material handling systems (AMHS). It applies to computing devices running Microsoft Windows or Linux, and not to PLCs, SCADA systems or devices connected through sensor/actuator networks. Its 12 core requirements fall into four areas:
Operating system support
What SEMI publicly states
Operating systems and documentation.
Evidence Winners helps prepare
An inventory of operating systems and versions on each computing device, vendor end-of-support dates, and compensating controls where an upgrade is not possible.
Network security
What SEMI publicly states
Support for secure transmission protocols, with documentation.
Evidence Winners helps prepare
A list of the protocols and ports the equipment actually uses, which have moved to encrypted transmission, and the reasons and compensating controls for those that cannot yet.
Endpoint protection
What SEMI publicly states
Vulnerability mitigation, malware scanning, access control and documentation.
Evidence Winners helps prepare
Patch records, pre-shipment malware scan records, and an account and permission list, including how default accounts are handled.
Security monitoring
What SEMI publicly states
Log management.
Evidence Winners helps prepare
Which events are logged, where logs are stored and for how long, and how the fab can obtain them.
According to SEMI in 2025, the 12 core requirements of E187-0122 address areas such as secure operating systems, patch management, secure communication protocols, access control, system hardening and log management. The wording of the 12 requirements is in the SEMI standard itself; "Evidence Winners helps prepare" describes our consulting practice, not the text of the standard.
Who needs to prepare?
- Equipment suppliers: SEMI says E187 was developed to help both equipment suppliers and device manufacturers reduce cybersecurity risks.
- Fab equipment procurement: SEMI notes that companies can use E187 as cybersecurity requirements in equipment procurement contracts; according to SEMI in 2024, TSMC has required a SEMI E187 checklist for manufacturing equipment with internet connectivity since September 2023.
- Equipment integration and service: SEMI E188 (Specification for Malware Free Equipment Integration) addresses malware protection during initial integration and during field service repairs, patching and maintenance.
Taiwan's SEMI E187 certification scheme
- In March 2026 Taiwan's Administration for Digital Industries announced the SEMI E187 semiconductor equipment cybersecurity certification scheme, maintained jointly by the Administration and SEMI, with the Taiwan Accreditation Foundation (TAF) as the accreditation body.
- It covers electromechanical equipment directly involved in semiconductor manufacturing with control, processing, measurement or handling functions.
- Process: apply to a laboratory for testing and obtain a test report, then apply to a certification body accredited to ISO/IEC 17065, which grants a certificate of conformity after review.
- Certificates are valid for three years, with post-market surveillance at least once every three years.
Already have IEC 62443 or ISO 27001? Start from what you have
E187 covers computing devices on equipment running Windows or Linux. According to SEMI in 2024, preliminary discussions on E187 2.0 stressed referencing established cybersecurity standards such as IEC 62443. Companies that already run IEC 62443 or ISO 27001 can share one set of practices and evidence for vulnerability management, access control, logging and document control. Winners builds the E187 requirements into the system you already run instead of setting up a separate one, cutting duplicated effort now and maintenance cost later.
How Winners Consulting works
- 01
Scope check
Confirm which equipment models and computing devices fall within E187 and the certification scheme, and which are PLC or SCADA and therefore out of scope.
- 02
Gap analysis
Compare the equipment against the 12 core requirements and your existing IEC 62443 and ISO 27001 evidence, and list gaps by priority.
- 03
Remediation and documentation
Prepare the operating system support table, secure protocols, endpoint protection and log management design and documentation, so R&D, QA and field service answer fabs consistently.
- 04
Testing and certification readiness
Prepare what the laboratory test and certification application need under the scheme, and support you through the review; testing and certification are performed by independent laboratories and certification bodies.
Frequently asked questions
What is SEMI E187?
SEMI E187 (Specification for Cybersecurity of Fab Equipment) was published by SEMI in January 2022. According to SEMI in 2025, E187-0122 has 12 core requirements in four areas: operating system support, network security, endpoint protection and security monitoring. SEMI describes it as the first international standard whose development was led by SEMI Taiwan.
Which equipment is in scope?
According to SEMI, E187 applies to computing devices running Microsoft Windows or Linux in semiconductor production equipment and automated material handling systems, and not to PLCs, SCADA systems or devices connected through sensor/actuator networks.
Is there SEMI E187 certification in Taiwan?
Yes. In March 2026 Taiwan's Administration for Digital Industries announced the SEMI E187 certification scheme, with TAF as the accreditation body. Applicants obtain a test report from a laboratory and then apply to a certification body accredited to ISO/IEC 17065; certificates are valid for three years.
How does SEMI E187 relate to IEC 62443?
E187 applies to computing devices on equipment running Windows or Linux. According to SEMI in 2024, preliminary discussions on E187 2.0 stressed referencing established cybersecurity standards such as IEC 62443. Companies already working on IEC 62443 can reuse practices and evidence for vulnerability management, access control and logging.
How does Winners Consulting approach SEMI E187?
Winners starts from your existing security system: scope check, gap analysis against the 12 core requirements, building the E187 requirements into your existing IEC 62443 or ISO 27001 practices, and preparing the testing and application material for the scheme. VP- and director-level consultants lead the work end to end, never outsourced; Winners is a consultant and does not test or certify.
Official sources
- SEMI: SEMI Taiwan publication of first fab equipment cybersecurity specification (2022-01-31)
- SEMI Standards Watch: SEMI publishes first cybersecurity standards (E187, E188)
- SEMI Standards Watch: Expanding on Taiwan's SEMI E187 development (2024)
- SEMI Standards Watch: Navigating SEMI E187 (2025)
- SEMI Store: SEMI E187-0122
- MODA Administration for Digital Industries: SEMI E187 certification scheme announcement
- MODA: SEMI E187 semiconductor equipment cybersecurity certification scheme V1.0