PLC Architecture in 2026: CPU, Memory, I/O and IEC 61131-3

PLC Engineering Notes · Updated 2026-06-30 · KOEED Blog

By KOEED Engineering Team · 2026-06-30 · 7 min read · Engineering Notes

AI Summary

• Modern PLC architecture in 2026 still centers on CPU + memory + I/O, but adds OPC UA, TSN, and edge compute.
• IEC 61131-3 stays the dominant programming model; v4 updates add modern type systems and OO features.
• Modular racks (ControlLogix, S7-1500, iQ-R, Modicon M580) and compact PLCs (CP1E, FP0R) coexist on the plant floor.
• Cybersecurity (IEC 62443) and functional safety (IEC 61508/61511) are now baseline requirements, not add-ons.
• KOEED keeps legacy and 2026 modules in stock side by side for migration and brownfield support.

A 2026 PLC is still a deterministic controller: a CPU runs an IEC 61131-3 scan against a memory image and drives the plant through modular I/O, with cybersecurity and safety now built in.

A Programmable Logic Controller has not changed its core job since 1968 — execute a deterministic scan cycle against a memory image and drive the real world through I/O. What has changed by 2026 is the network around it, the programming model layered on top, and the cybersecurity and functional-safety expectations baked into the rack. This Engineering Note revisits the original KOEED piece on PLC structure and brings every block up to 2026 standards.

1. CPU — the deterministic core

The CPU block still contains a microprocessor, volatile work memory, non-volatile program storage, and the scan engine. In 2026 the silicon choices have shifted:

• Allen-Bradley ControlLogix 1756-L8x and 1756-L9x use multi-core ARM SoCs with hardware-accelerated CIP Security.
• Siemens SIMATIC S7-1500 CPUs (CPU 1515, 1518) run on AMD x86-64 SoCs with on-die motion and OPC UA FX.
• Mitsubishi MELSEC iQ-R and Schneider Modicon M580 ePAC pair ARM cores with dedicated Ethernet ASICs for CC-Link IE TSN and EtherNet/IP DLR.

Regardless of vendor, the scan cycle still follows the “read inputs → execute program → write outputs” pattern — what differs is the cycle time (sub-100 μs on motion CPUs), the determinism guarantee (TSN time-sliced Ethernet), and the security envelope (signed firmware, secure boot, role-based access).

2. Power supply — still the unsung hero

The power supply block in 2026 must do three things at once: deliver stable 24 V or 120/230 V AC to the backplane, support hot-swap on redundant chassis (e.g. 1756-PA75R on ControlLogix), and provide buffered ride-through for at least one full scan during mains dips. Modular SITOP, Phoenix Contact QUINT, and Siemens PM1507 supplies now include IO-Link diagnostics and predictive health counters.

3. Memory — tiered, signed, and secured

PLC memory in 2026 is no longer one block but a stack:

Tier	Type	Holds
Work memory (RAM)	Volatile, battery or super-cap backed	Tag values, retain flags, process image
Load memory	Non-volatile flash or SD card	Compiled project, ACD / S7P / GPX files
System memory	Read-only, signed firmware	Runtime kernel, libraries, IEC 61131-3 system
Diagnostic buffer	Ring-buffered flash	Fault history, security audit, firmware changes

Retain data and the diagnostic buffer are now signed — vendors refuse to boot if the hash drifts. The old habit of pulling a battery while the PLC is live to “clear” a fault is permanently retired.

4. Input & output modules — smarter, channel-isolated, IO-Link ready

Digital and analog I/O cards are functionally unchanged — read a voltage or current, scale it, expose it as a tag — but the 2026 generation adds per-channel diagnostics, web-configurable scaling, and IO-Link master capability. A 2026 Siemens SM 531 AI8 module, for example, reports wire break, over-range, and calibration drift back to TIA Portal without extra wiring. Safety I/O (F-CPU, PROFIsafe, CIP Safety) lives on the same backplane; the F-runtime is isolated from the standard scan by a second processor on the safety CPU.

5. Communication ports — OPC UA FX, TSN, and the end of serial in new designs

RS-232 and RS-485 are still present on legacy modules like 1747-KE and QJ71C24N, but new builds ship with at least two gigabit Ethernet ports supporting one or more of:

• EtherNet/IP with DLR and CIP Security (Allen-Bradley, Schneider, Omron NJ/NX)
• PROFINET with PROFIsafe and TSN (Siemens, Phoenix Contact)
• EtherCAT for high-speed motion (Beckhoff, Omron NJ via ETN21)
• CC-Link IE TSN (Mitsubishi iQ-R, partner vendors)
• OPC UA FX as the cross-vendor field-level exchange standard

OPC UA FX deserves a callout: it is the first protocol where the field device speaks the same language as the MES, with built-in encryption, signing, and pub/sub — you no longer need a separate MQTT or REST bridge.

6. Programming model — IEC 61131-3 and the 2026 amendments

The IEC 61131-3 standard defines the five languages: ladder diagram (LD), function block diagram (FBD), structured text (ST), instruction list (IL, deprecated in 3rd ed.), and sequential function chart (SFC). The 2026 working group additions and vendor extensions now in production include:

• Object-oriented extension (METHOD, PROPERTY, interface inheritance) — full support in CODESYS V3.5, TwinCAT 3, and Beremiz.
• Namespace and strong typing improvements (no more implicit INT→REAL conversion).
• POU (Program Organization Unit) libraries with versioned semantic numbering.
• OPC UA companion specification for PLCopen Motion & Safety.

Vendor IDEs still look familiar: Studio 5000 Logix Designer (AB), TIA Portal V19+ (Siemens), GX Works3 (Mitsubishi), CX-One / Sysmac Studio (Omron), EcoStruxure Control Expert (Schneider). Under the hood they are all IEC 61131-3 runtimes, with vendor-specific extensions for safety, motion, and recipe handling.

7. HMI & SCADA — web-based, role-aware, mobile-friendly

The HMI has migrated from dedicated touch panels to a mix of edge HMIs and browser-based panels. SIMATIC HMI Unified panels run a Chromium-based runtime, the PanelView 5000 family uses Studio 5000 View Designer, and the Magelis GTU from Schneider delivers HTML5 panels. Every modern HMI now ships with role-based access (IEC 62443-3-3 SR 1.5 minimum) and audit logging that meets FDA 21 CFR Part 11 for process industries.

8. What changed since 2024

This section is the update bar for readers who knew the original piece. The structural blocks — CPU, memory, I/O, comms, HMI — are the same, but the contract around them has shifted:

• Cybersecurity is now a baseline. IEC 62443-4-2 certification is a hard requirement for new plants in EU, US, and APAC. CIP Security, PROFIsafe, and OPC UA signing are table stakes.
• Time-Sensitive Networking (TSN) has landed. Single Ethernet fabric now carries standard, safety, and motion traffic on one cable.
• OPC UA FX replaces most MQTT bridges. PLCs publish structured data with semantic naming, not raw tag dumps.
• Safety and standard runtimes share the same CPU. Safety no longer requires a separate rack; the F-CPU and F-I/O are integrated modules on the same backplane.
• Edge compute is real. Modern CPUs run containerized analytics (Node-RED, Python) alongside the scan cycle, gated by a separate non-real-time OS partition.
• Energy and sustainability telemetry. PROFIenergy and similar profiles let PLCs switch off non-essential drives during idle, with energy counters per channel.

9. Sourcing a 2026-ready PLC stack from KOEED

KOEED carries the full 2026 generation side by side with the legacy hardware that still runs brownfield plants. Active stock covers Allen-Bradley ControlLogix 1756-L9x and CompactLogix 5380, Siemens S7-1500 and ET 200SP, Mitsubishi iQ-R and MR-J5, Omron NX/NJ and CP-series, Schneider Modicon M580 ePAC, Yaskawa MP3300 and Σ-7, KEYENCE CV-XG vision, and Panasonic FP7 — all in stock, datasheet on request.

If you are migrating a 1747-ASB, S7-300, or MELSEC-Q line, send the BOM and we will quote the modern equivalent plus any pre-validated adapter modules in one line item. Worldwide shipping, quote within 24 hours.

Related on KOEED Blog

• Engineering Notes index
• Migration guides for legacy PLCs
• Allen-Bradley PLC modules & spares
• Siemens SIMATIC S7 parts
• AI diagnostic tool for PLC faults

Frequently asked questions

Is the classic PLC scan cycle (read inputs → execute → write outputs) still used in 2026?

Yes. Every modern IEC 61131-3 runtime still uses that model. The change is that 2026 CPUs add a separate safety scan and an optional non-real-time partition for analytics, all running on the same silicon.

Do I need to learn IEC 61131-3 if my plant only runs ladder logic?

Ladder is one of the five IEC 61131-3 languages and will stay supported. New projects still mix ST for math, FBD for drives, and SFC for sequences. KOEED migration guides walk through ladder-to-ST conversions step by step.

What replaced RS-232 and MPI/Profibus on new PLCs?

Industrial Ethernet protocols: PROFINET, EtherNet/IP, EtherCAT, and CC-Link IE TSN. Serial ports remain on legacy and low-cost compact PLCs but are no longer the primary fieldbus in new designs.

How do I keep a 1990s SLC 500 or S7-300 line running in 2026?

Source spare modules from a multi-brand distributor (KOEED stocks 1747, 1746, 6ES7 300/400, and MELSEC-Q in active and refurbished condition), wrap the line behind a modern firewall, and plan a phased migration with the modern equivalent CPU.

Does my 2026 PLC need cybersecurity certification?

For new builds in EU, US NERC-CIP facilities, and most APAC process plants, yes — IEC 62443-4-2 is the baseline. KOEED can confirm whether a specific CPU module ships with the latest signed firmware on request.