The certification of conformity to IEC 62443 standards is the pinnacle to aim for to prove the security of a component.
Discover all the Certification options issued
Our internal BYHON division is accredited ISASecure® for the issuance of certification according to IEC 62443 schemes.
We implement the compliance verification schemes defined by ISASecure®, with license number ISCI-CL0005, including process verification, Security Development Lifecycle Assurance Certification (SDLA). The SDLA process scheme is distinctive of ISASecure® certification and preparatory to the assessment of technical compliance of the product – component or system – according to the models of Component Security Assurance Certification (CSA) and System Security Assurance Certification (SSA).
The certification options accredited by ISASecure® for component manufacturers are:
- SDLA (Security Development Lifecycle Assurance) certification. Third-party verification with respect to ISASecure® requirements that the IEC 62443-4-1 standard, focused on the Security Plan, is implemented by the certification applicant
- CSA (Component Security Assurance) certification. Third-party verification with respect to the ISASecure® requirements of the IEC 62443-4-2 standard for the component, of which the application of the SL-T (Zone & Conduit) diagram is verified. The service also includes verification that the artifacts have been developed according to the lifecycle in compliance with IEC 62443-4-1. The lifecycle must also be certified together with the application for CSA Certification. Multiple and different certification requirements may apply depending on the specific product type (embedded, host, software device and network device or a combination thereof).
The purpose of the ISASecure® certification service is to perform accredited certification showing that a component meets the requirements of the IEC 62443 standard for a given level of security (SL-C). The certification scheme is applied in the most comprehensive manner and as the highest recognition of compliance, with a certificate issued by an ISASecure® accredited laboratory.
In addition, we provide other certification methods, inspired by the Industrial Cyber Security certification schemes according to IEC 62443:
- IEC 62443 Certification. Third-party verification with respect to the usual requirements of IEC 62443-4-2 for a standard product, of which the application of the SL-T (Zone & Conduit) diagram is verified.
The purpose of the IEC 62443 certification service is, therefore, to perform an independent certification that validly and demonstrably evidences the compliance of a component with the requirements of IEC 62443 for a given level of security (SL-C), again guaranteeing the parameters of security, integrity, availability and confidentiality.
In IEC 62443/ISA 99 terms, an OT system is defined as a “control system,” that is, a hardware or software component intended to be integrated into a final industrial automation and control system. PLCs, HMIs, SCADA systems, and safety instrumented systems are examples of OT systems.
The legislative references in the IEC 62443 standard directed at OT device manufacturers are found in IEC 62443-4-1 and IEC 62443-4-2 regarding the design requirements in conformity with legislation for systems, sub-systems, or hardware or software components.
As defined in IEC 62443-4-1, the manufacturer is required to implement certain cyber security practices when developing the product:
- Specification of Security Guidelines
- Security by design
- Secure Implementation
- Security V&V Testing
- Security Guidelines
Why Choose us
- We have gained experience in the OT Cyber Security field since 2014
- We test every solutions thanks to our in-house OT Cyber Security laboratory
- Our specialists are IEC 62443/ISA 99-certified personnel (Fundamentals Specialist and Cyber Security Risk Assessment Specialist)
- Automation and OT Network Security are some of our most performing competences
- We have bulit a wide network of partnerships with the main international OT solution suppliers
- Our BYHON internal division is the ISASecure® accredited certification body
What some of our customers say about us
"Their flexible and innovative approach to Cyber Security Risk Assessment had been the key for the success of our conformity project according to IEC 62443 standards."
"We recommend H-ON Consulting because they are a firm that shares inspiring values, such as continuous professional growth and innovation seeking."
"The biggest benefit our company received working with H-ON Consulting was a combination of on-going flexibility and most of all speed of delivery."
Sirio Sistemi Elettronici
"We highly recommend H-ON Consulting service for their expert industrial knowledge concerning machines, process, digital data."
"The collaboration was a very successful experience for both companies."