🚀 New Certification from ISASecure for High-Criticality Industrial Components!

[Alper Aktaş]

🔒 Critical Step for National Security Systems​

ISASecure, an affiliate of the International Society of Automation (ISA), has signed a significant collaboration with the U.S. National Security Agency (NSA). This partnership aims to develop a new certification program for manufacturers' commercial operational technology (OT) components. The goal is to enhance the security of high-criticality OT systems, particularly those used in National Security Systems.

⚙️ ISA 62443 and NSA Contribution​

ISA had previously defined specific cybersecurity requirements for OT components in the international OT cybersecurity standard, ISA 62443-4-2. In addition, the NSA's Operational Technology Assurance Partnership Program published six new technical security requirements in its report titled "Operational Technology Assurance Partnership: Smart Controller Security in National Security Systems."

✅ HCSA Certification on the Way​

In response to these needs, ISASecure is developing a separate High-Criticality Component Security Assurance (HCSA) certification program, derived from its existing Component Security Assurance (CSA) certification program. Once the program is complete and accepted by the OTAP office, the NSA will use this program as an approved certification mechanism in the process of adding OT OEM components to the NSS OT Product Compliant List.

🌟 Major Achievement for ISASecure​

Dr. Mark P. DeAngelo, ISASecure Program Director, described this development as a "major achievement in ISASecure's history." DeAngelo stated that the NSA recognized the importance of the ISA 62443 standard and the ISASecure program. He emphasized that ISASecure's commitment to robust OT security was instrumental in the NSA's decision to partner with them. He also added that CSA product certification forms the foundation for HCSA.

🛡️ The Key to Security​

An ISASecure HCSA certification will provide significant evidence to the product manufacturer for the product's inclusion in the NSA's NSS OT PCL list. In other words, ISASecure certification is an important prerequisite for a smart controller to be purchased and installed within an NSS.