Industrial Cyber Security Certification

BYHON Entity Certificate
The certification of conformity to IEC 62443 standards is the pinnacle to aim for to prove the security of a component.

Discover all the Certification options issued

Our internal BYHON division is accredited by ANSI and ISASecure® for the issuance of certification according to IEC 62443 schemes.

We implement the compliance verification schemes defined by ISASecure®, with license number ISCI-CL0005, including process verification, Security Development Lifecycle Assurance Certification (SDLA). The SDLA process scheme is distinctive of ISASecure® certification and preparatory to the assessment of technical compliance of the product – component or system – according to the models of Component Security Assurance Certification (CSA) and System Security Assurance Certification (SSA).

 

The certification options issued by BYHON and accredited by ISASecure® for component manufacturers are:

  • SDLA (Security Development Lifecycle Assurance) certification. Third-party verification with respect to ISASecure® requirements that the IEC 62443-4-1 standard, focused on the Security Plan, is implemented by the certification applicant
  • CSA (Component Security Assurance) certification. Third-party verification with respect to the ISASecure® requirements of the IEC 62443-4-2 standard for the component, of which the application of the SL-T (Zone & Conduit) diagram is verified. The service also includes verification that the artifacts have been developed according to the lifecycle in compliance with IEC 62443-4-1. The lifecycle must also be certified together with the application for CSA Certification. Multiple and different certification requirements may apply depending on the specific product type (embedded, host, software device and network device or a combination thereof).

The purpose of the ISASecure® certification service is to perform accredited certification showing that a component meets the requirements of the IEC 62443 standard for a given level of security (SL-C). The certification scheme is applied in the most comprehensive manner and as the highest recognition of compliance, with a certificate issued by an ISASecure® accredited laboratory.

 

In addition, we provide other certification methods, inspired by the Industrial Cyber Security certification schemes according to IEC 62443:

  • IEC 62443 Certification. Third-party verification with respect to the usual requirements of IEC 62443-4-2 for a standard product, of which the application of the SL-T (Zone & Conduit) diagram is verified.

The purpose of the IEC 62443 certification service is, therefore, to perform an independent certification that validly and demonstrably evidences the compliance of a component with the requirements of IEC 62443 for a given level of security (SL-C), again guaranteeing the parameters of security, integrity, availability and confidentiality.

FAQ

In IEC 62443/ISA 99 terms, an OT system is defined as a “control system,” that is, a hardware or software component intended to be integrated into a final industrial automation and control system. PLCs, HMIs, SCADA systems, and safety instrumented systems are examples of OT systems.

The legislative references in the IEC 62443 standard directed at OT device manufacturers are found in IEC 62443-4-1 and IEC 62443-4-2 regarding the design requirements in conformity with legislation for systems, sub-systems, or hardware or software components.

As defined in IEC 62443-4-1, the manufacturer is required to implement certain cyber security practices when developing the product:

  • Specification of Security Guidelines
  • Security by design
  • Secure Implementation
  • Security V&V Testing
  • Security Guidelines

Recommended Posts

IEC 62443 industrial cyber security
simbolo certificazione cyber
certificazione isa hmi

Follow us on

Why Choose us

  • Experience in the OT Cyber Security field since 2014
  • In-house OT Cyber Security laboratory
  • In-house IEC 62443/ISA 99-certified personnel (Fundamentals Specialist and Cyber Security Risk Assessment Specialist)
  • Automation and OT network specialists
  • Wide network of collaborations with the main international OT solution suppliers

For more information about this service or to request a quote