Insights

ISASecure and IEC 62443, explained with the numbers

What each certification program actually evaluates, how the security levels and device types change the scope, and where the common points of confusion come from — written by the assessors who run these evaluations.

Filteractive
Clear all
Program
AllCSA10ICSA10SSA10SDLA10ACSSA11Cross-program1
For
Asset owners20Product suppliers42System integrators18Service providers4
Topic
Security levels10Tiers (Core / Advanced)5Device & component types9Assessment streams6Testing & verification11Evidence & artifacts16Independent testing5Maturity levels4Sampling1Scope & boundaries16Surveillance & maintenance4Certification process20Common component constraints (CCSC)1Cost & effort3Comparisons4Roadmaps & readiness1
Depth
Introductory5Intermediate38Deep dive9
Sort
NewestShortest readIntro firstBy series

2 articles match your filters

ICSADeep dive

Advanced is SL 4, except when it is SL 3: the ISASecure ICSA tier-to-level trap

ICSA Advanced maps to SL 4 in the functional assessment but to SL 3 in vulnerability testing. Why the mappings diverge and how to read the certificate.

Sep 8, 20268 min readRead
SSADeep dive

Reference layouts and scalable systems: how one ISASecure SSA certificate covers a family of configurations

How ISASecure SSA certifies a scalable IEC 62443-3-3 system: zone specifications, layouts in scope, the reference layout the lab tests, and nine submissions.

Sep 8, 202610 min readRead

Have a product or system to certify?

Talk to the assessors who wrote these articles about what applies to you.

Contact UsISASecure Services