ISASecure and IEC 62443, explained with the numbers
What each certification program actually evaluates, how the security levels and device types change the scope, and where the common points of confusion come from — written by the assessors who run these evaluations.
Filteractive
6 articles match your filters
How ACSSA assesses IEC 62443-2-1 requirements: 89 composite verdicts from four standards
How ISASecure ACSSA folds IEC 62443-2-4, 3-2 and 3-3 results into one composite verdict per IEC 62443-2-1 requirement, and what makes a verdict fail.
After the certificate: ACSSA surveillance in years one and two, recertification in year three
How an ISASecure ACSSA certificate stays valid: 36 months, surveillance in years one and two, recertification in year three, nonconformities and suspension.
The ACSSA assessment process: four phases and the report you receive
How an ISASecure ACSSA evaluation runs: the plan you approve, the four ACSSA-304 phases from risk assessment to report, and how to read the ACSSA-303 report.
An asset owner's installed IACS: IEC 62443 asset owner certification scope under ISASecure ACSSA, and the six documents that define it
ISASecure ACSSA certifies an asset owner's installed IACS, bounded by six change-controlled documents: who may apply, what is in scope and what is carved out.
ACSSA evaluation results: ten result types, and the one that fails
ACSSA records ten result types across four IEC 62443 parts. Only Not met fails; three others pass only with approved documentation; unsampled zones get none.
What ISASecure ACSSA certification actually evaluates
ISASecure ACSSA certifies an asset owner's installed control system against IEC 62443-2-1, 3-2, 3-3 and 2-4 at maturity level 3. Here is the map.
Have a product or system to certify?
Talk to the assessors who wrote these articles about what applies to you.