When I worked for General Motors we would use an outside company to certify the Safety PLC and Safety Circuits of any new robotic cell prior to running production. Once the system was bought off the PLC was locked down with a password and only the plant safety department had access to it.
How are other companies doing this now?