ISASecure and IEC 62443, explained with the numbers
What each certification program actually evaluates, how the security levels and device types change the scope, and where the common points of confusion come from — written by the assessors who run these evaluations.
Filteractive
7 articles match your filters
One certificate, several levels: how ISASecure SSA assigns a capability security level per zone
How ISASecure SSA assigns an IEC 62443 capability security level to each zone of a system, why one certificate can carry several levels, and how to specify it.
IEC 62443-3-3 requirements: how ISASecure SSA evaluates all 100 clauses in FSA-S
ISASecure SSA's FSA-S stream covers every clause of IEC 62443-3-3: 51 system requirements and 49 enhancements, laid out as 116 rows and scored zone by zone.
How to read an ISASecure SSA certificate and report: zones, levels and user-enforced mitigations
How to read an ISASecure SSA certificate and its SSA-303 report: capability levels per zone, the ten report sections, and the mitigations the user must apply.
SSA SDA-S artifacts: the 74 lifecycle rows ISASecure checks for a system, and why fuzz and load results are among them
ISASecure SSA's SDA-S stream re-checks 74 assessable rows of the SDLA-312 lifecycle catalogue for the system as sold, fuzz and load coverage included.
A system as sold: IEC 62443-3-3 system certification scope under ISASecure SSA, and what falls outside it
ISASecure SSA certifies a control-system product as sold, at a version, in a fixed or scalable layout: the four eligibility criteria and what falls outside.
ISASecure SSA vulnerability testing: the scan where each zone sets its own pass threshold
How VIT-S works in ISASecure SSA: one known-vulnerability scan of every IP-addressed component, with the pass threshold set per component by its zone's level.
Independent testing in ISASecure SSA: eleven flagged requirements, one scan, one reference system
ISASecure SSA flags 11 of its 116 assessable rows for lab testing, plus one vulnerability scan on one reference system. What the lab tests and reviews.
Have a product or system to certify?
Talk to the assessors who wrote these articles about what applies to you.