What is CSA?
Component Security Assurance (CSA) is an ISASecure certification scheme that validates whether individual components (such as PLCs, RTUs, DCS controllers, or embedded devices) meet the security requirements defined in IEC 62443-4-2.
Assessment Areas
CSA certification evaluates components against seven foundational requirements:
- Identification and Authentication Control (IAC)
- Use Control (UC)
- System Integrity (SI)
- Data Confidentiality (DC)
- Restricted Data Flow (RDF)
- Timely Response to Events (TRE)
- Resource Availability (RA)
Security Levels
Components are certified to a specific Security Level (SL 1-4), indicating the level of protection they provide. The target SL depends on the intended deployment environment and threat model.
Prerequisites
CSA certification requires that the product supplier also holds SDLA certification, ensuring that the component was developed using a secure development lifecycle.
Back to Glossary