ISASecure и NSA запускают новую схему сертификации для критически важных промышленных компонентов

ISASecure Launches HCSA Certification Scheme For High-Criticality Industrial Components Key Highlights - The new HCSA scheme is based on the established ISA 62443-4-2 standard and aims to secure components used in national security systems. - ISASecure's certification provides manufacturers with essential evidence for inclusion on the NSA's NSS OT Product List. - The partnership underscores the importance of robust cybersecurity standards in critical infrastructure and national security. The International Society of Automation recently announced that ISASecure, a wholly owned subsidiary of ISA, is partnering with the United States National Security Agency (NSA) to develop a new certification scheme for commercial operational technology (OT) components sold by manufacturers and procured by the US government for use within National Security Systems. With a common goal of securing high criticality OT systems, the new certification scheme is intended to increase confidence in the security of commercial components. ISA developed a set of security levels with specific cybersecurity requirements for OT components in the international OT cybersecurity standard ISA 62443-4-2. In addition, six new technical security requirements were developed and published by NSA’s Operational Technology Assurance Partnership Program in the NSA/CSS Cybersecurity Technical Report titled "Operational Technology Assurance Partnership: Smart Controller Security within National Security Systems" (April 2025). In response to the need, ISASecure is developing a separate High Criticality Component Security Assurance certification scheme derived from the well-established Component Security Assurance certification scheme. Upon completion and the OTAP program office's acceptance of the ISASecure HCSA scheme, the NSA will use the scheme as an approved certification mechanism in the evaluation process of adding OT OEM components to the NSS OT Product Compliant List. “This is a major achievement in the history of ISASecure,” said Dr. Mark P. DeAngelo, program manager of ISASecure. “The NSA recognizes the importance of the ISA 62443 standard and the ISASecure program, which independently evaluates a product's conformity to the ISA 62443 standard. ISASecure's reputation and commitment to robust OT security precedes the NSA's decision to partner with us. Our CSA product certification set the foundation for HCSA." An ISASecure HCSA certificate provides a product manufacturer with essential evidence in consideration of that product's inclusion on the NSA's NSS OT PCL. In other words, ISASecure certification is an important step before a smart controller can be purchased and installed within an NSS.