Our internal BYHON division is accredited by ANSI and ISASecure® for the issuance of certification according to IEC 62443 schemes.

We implement the compliance verification schemes defined by ISASecure®, with license number ISCI-CL0005, including process verification, Security Development Lifecycle Assurance Certification (SDLA). The SDLA process scheme is distinctive of ISASecure® certification and preparatory to the assessment of technical compliance of the product – component or system – according to the models of Component Security Assurance Certification (CSA) and System Security Assurance Certification (SSA).

The certification options issued by BYHON and accredited by ISASecure® for component manufacturers are:

• SDLA (Security Development Lifecycle Assurance) certification. Third-party verification with respect to ISASecure® requirements that the IEC 62443-4-1 standard, focused on the Security Plan, is implemented by the certification applicant
• CSA (Component Security Assurance) certification. Third-party verification with respect to the ISASecure® requirements of the IEC 62443-4-2 standard for the component, of which the application of the SL-T (Zone & Conduit) diagram is verified. The service also includes verification that the artifacts have been developed according to the lifecycle in compliance with IEC 62443-4-1. The lifecycle must also be certified together with the application for CSA Certification. Multiple and different certification requirements may apply depending on the specific product type (embedded, host, software device and network device or a combination thereof).

The purpose of the ISASecure® certification service is to perform accredited certification showing that a component meets the requirements of the IEC 62443 standard for a given level of security (SL-C). The certification scheme is applied in the most comprehensive manner and as the highest recognition of compliance, with a certificate issued by an ISASecure® accredited laboratory.

In addition, we provide other certification methods, inspired by the Industrial Cyber Security certification schemes according to IEC 62443:

• IEC 62443 Certification. Third-party verification with respect to the usual requirements of IEC 62443-4-2 for a standard product, of which the application of the SL-T (Zone & Conduit) diagram is verified.

The purpose of the IEC 62443 certification service is, therefore, to perform an independent certification that validly and demonstrably evidences the compliance of a component with the requirements of IEC 62443 for a given level of security (SL-C), again guaranteeing the parameters of security, integrity, availability and confidentiality.