See Our Certifications and How They Help Reduce Risk in Your Industry

View Certified Devices

Contact Us Now

CRT Test Tool Recognition

Background

ISASecure EDSA and SSA product certifications include an assessment step during which submitted devices/systems are subjected to robustness testing by the ISCI Chartered Lab (CB). Embedded devices are subjected to Communication Robustness Testing (CRT) in the EDSA certification process and control systems are subjected to CRT testing plus System Robustness Testing (SRT) in the SSA certification process. Requirements for these tests are derived from the IEC 62443 foundational cybersecurity requirements for products.

Test tools used by ISCI CB’s must be able to successfully test/validate all of the ISASecure Embedded Device Security Assurance (EDSA) CRT requirements and/or the System Security Assurance (SSA) SRT requirements published in the ISASecure certification specifications.  The test tools must demonstrate that they are capable of executing ISASecure certification tests with consistent results.

CRT Tool Recognition Options

  1. Option 1 - ISCI policy allows CRT tool suppliers to submit their tool for recognition for use in the EDSA certification only.  EDSA-201 contains all CRT tool recognition process information and document references needed by the CRT tool supplier for EDSA (with the addition of EDSA-102 Errata specification).
  2. Option 2 - ISCI policy allows CRT tool suppliers to submit the CRT tool for recognition for use in the SSA certification.  EDSA-201 contains all CRT tool recognition process information and document references needed by the tool supplier (with the addition of EDSA-102).  Note: As of August 2016, there is only one additional SSA CRT tool technical capability over-and-above the EDSA CRT tool technical capabilities necessary to support SSA CRT and SRT tests).


ISCI Staff Processes the Tool Submittal for Recognition

The CRT test tool recognition process is an evaluation of the CRT test tool by ISCI technical staff to ensure that the test tool meets the necessary capabilities for use by ISCI CB’s; and for use by suppliers in their product development testing processes to improve the security capabilities of their products and provide confidence that their products meet the ISASecure CRT certification requirements.

Cybersecurity test tool suppliers who want their tools recognized for use in the ISASecure® certification scheme should submit their application and product to ISCI support staff.  CRT tools meeting ISCI recognition requirements are listed on the www.isasecure.org website, giving your product expanded market exposure and enhanced credibility.

Process

The process steps for CRT tool recognition are described in detail in the EDSA-201 Recognition Process for Communication Robustness Testing Tools document which can be downloaded using the web link shown below. 

Fees and Expenses

Applicants will be charged an administrative application fee (see fee schedule below) for the test tool submittal.  Applicants will also be billed for the hours expended (see hourly rate below) by ISCI technical staff plus associated travel and living expenses (at actual cost).

First Step

The first step is to contact the ISCI managing director who will provide answers to your questions and send you an official ISCI CRT tool recognition application form EDSA-203 (this form is only available directly from ISCI staff).  ISCI highly recommends that the applicant review EDSA-201 Recognition Process for Communication Robustness Testing Tools prior to contacting the managing director.
 
ISA Security Compliance Institute
Andre Ristaino, Managing Director
67 Alexander Drive
Research Triangle Park, NC 27709
+1 919-323-7660
aristaino@isa.org
 

CRT Tool Recognition Requirements

                                                                                           

The EDSA-201 document describes ISCI’s step-by-step recognition process for evaluating CRT tools for use in the ISASecure® certification scheme, including references to ISASecure specifications.  Please review EDSA-102 Errata for last-minute clarifications and/or updates to the CRT tool recognition requirements.

 

ISCI recommends that applicants download and review these documents prior to contacting the ISCI managing director. 

 

EDSA-201 Recognition Process for Communication Robustness Testing Tools View / Download PDF

EDSA-102 Errata

View / Download PDF

CRT Tool Application Processing Fee Schedule
ISCI CRT Test Tool Recognition Fee - Initial $5,000
ISCI CRT Test Tool Recognition Fee - Maintenance (billed when a review is required/executed) $5,000
Hourly Rate for ISCI Technical Staff $200