The ISA Security Compliance Institute (ISCI) announced availability of a system-level cybersecurity certification for industrial automation and control systems (IACS) products. ISCI also announced Q2 2014 availability of an organizational certification that ensures that suppliers are following cybersecurity development and support lifecycle processes for IACS products. The new product certification is the System Security Assurance (ISASecure SSA), which assesses the cybersecurity of off-the-shelf industrial control systems and certifies conformance to IEC 62443-3-3. According to the ISCI, the objective of this certification is to ensure cybersecurity robustness for off-the-shelf control systems and to certify that the systems are free from known vulnerabilities. The SSA program description and certification specifications are available for download in PDF format from the ISCI website.The new organizational certification is the Security Development Lifecycle Assurance (SDLA) certification, which ensures that a supplier’s product development organization has institutionalized cybersecurity into its product development and support lifecycle processes and follows them consistently on an ongoing basis. The objective of this certification is to ensure that cybersecurity is designed into IACS products from the beginning and is followed throughout all product development and support lifecycle phases.ISASecure certifications are based upon international cybersecurity standards, including the IEC 62443 series, ISO 27001 and other relevant industry consensus standards.More information about the certifications is available here.
Leaders relevant to this article: