ISASecure Partners with NSA to Enhance Security for U.S. Government Components

ISASecure and NSA's New Certification Initiative

In a groundbreaking partnership, the International Society of Automation (ISA) and the National Security Agency (NSA) are working together to create a certification scheme that ensures the security of commercial operational technology (OT) components used by the U.S. government. This initiative highlights a growing recognition of cybersecurity's importance, especially as it relates to national security systems.

Founded in 2007, ISASecure is a subsidiary of ISA dedicated to providing the highest level of cybersecurity assurance for industrial automation systems. The organization plans to develop a new certification scheme known as High Criticality Component Security Assurance (HCSA). This initiative is vital given that the U.S. government depends on various OT components for its National Security Systems (NSS).

Security Needs and Standards Development

The rise of cyber threats in recent years has heightened the need for robust security measures in operational technologies. In response, ISA has previously established security levels that outline specific cybersecurity requirements detailed in the international standard ISA 62443-4-2. To expand on these efforts, the NSA has developed additional technical security requirements published in the NSA/CSS Cybersecurity Technical Report.

Recognizing the importance of a standardized approach, ISASecure is deriving its HCSA certification scheme from its already recognized Component Security Assurance (CSA) certification. This new scheme aims to elevate confidence levels associated with commercial OT components, paving the way for enhanced protection and security assessments.

A Strategic Certification Process

Once finalized, the HCSA certification will be used by the NSA as an approved mechanism to evaluate OT components for inclusion on the NSS OT Product Compliant List (PCL). This certification serves as a critical step before manufacturers can sell OT equipment to government entities. As Dr. Mark P. DeAngelo, program manager for ISASecure, aptly notes, the collaboration underscores the NSA's acknowledgment of the ISA 62443 standard's relevance and ISASecure's independent evaluations that gauge product conformity.

Furthermore, qualifying for an ISASecure HCSA certificate will offer manufacturers valuable leverage in meeting the rigorous demands placed by the NSA on components intended for use in sensitive national security environments. This certification could significantly streamline the qualification process for suppliers of smart controllers and related components.

Call to Industry Stakeholders

As ISASecure embarks on the development of this critical certification, it invites manufacturers interested in smart controller technologies to participate. Stakeholders, including component manufacturers, certification bodies, and various related organizations, are encouraged to engage in this initiative to strengthen the security infrastructure surrounding the operational technology systems.

In summary, this partnership between ISASecure and the NSA marks a pivotal moment in the quest for secure operational technologies. With a shared goal of ensuring the safety and integrity of critical systems, this initiative is projected to raise the bar for cybersecurity in governmental applications, ultimately benefiting national security and public safety.

For those interested in contributing to the HCSA certification process or seeking further insights, Dr. Mark P. DeAngelo is available for inquiries via email.

About ISASecure

ISASecure, established by the ISA, focuses on delivering top-notch cybersecurity assurance for industrial automation. Since its inception, it has conducted numerous certifications for various control system products, establishing a strong reputation in the industry. With support from multiple global leaders in various sectors, ISASecure plays a crucial role in promoting cybersecurity standards across the board.

By raising the standards through initiatives like the HCSA scheme, ISASecure continues to play a vital role in safeguarding the nation's technological assets against evolving threats.