About the ACSSA IC49-Certified Consultants

Why Hire an ACSSA Consultant  

1.  Work with an expert. Consultants who have earned the ACSSA for Evaluators Specialist badge have successfully completed the three-day IC49 ACSSA Evaluator Training and passed the proctored IC49 exam. 

2.  Prepare for a successful assessment. If your organization is preparing for an ACSSA assessment by an Inspection Body (IB) or Certification Body (CB), an ACSSA Consultant can conduct a readiness assessment, answer questions, identify gaps and recommend improvements. Unlike consultants, IBs and CBs cannot provide consulting or remediation advice. 

3.  Assess your readiness. If you want to determine whether your facility is ACSSA-ready but do not yet need an official report or certificate, an ACSSA Consultant can assist you with your needs.

Tips for working with an ACSSA Consultant

• Contact a consultant and negotiate terms. The consultants listed below have at least one individual who has earned the Evaluators Specialist badge, but you should still evaluate and select the consultant that best fits your needs. 

• Agree on pricing and execute a contract before work begins. 

• Confirm who will have access to your facility and records, and ensure you are comfortable with the level of access being granted. 

• If working with a large consulting firm, designate a primary IC49-trained consultant who will serve as your main point of contact throughout the engagement. 

• *NOTE: Consultants do not have the same stringent requirements as CBs and IBs. Items to ask a consultant could be (i.) consultant's formal education, (ii.) work experience in an ACS environment, (iii.) do they have the ISA/IEC 62443 Cybersecurity Expert badge and (iv.) their knowledge of security standards. Refer to ACSSA-200 Table 4 for a list of evaluator qualifications.