Skip to content

IEC 62443 for Building Automation Systems

The IEC 62443 standards are becoming the de-facto global cybersecurity standards for operational technology, IOT and, development processes for automation and controls. The presenters will describe why suppliers in the building management systems (BMS) industry have recognized the relevance to the BMS industry and are adopting IEC 62443 as the preferred standard.

This webinar provides an overview of the structure of the ANSI/ISA 62443 (IEC 62443) family of standards for automation and control systems. The presenter will describe how the standards are based on stakeholder viewpoints and the system lifecycle, and how the IEC 62443 standards are useful in securing the supply chain for off-the-shelf automation technology.

The presenters will also introduce the international ISASecure product certification scheme, which is managed by the International Society of Automation, the authors of the ANSI/ISA 62443 standards (IEC 62443).



Andre Ristano

Mr. Ristaino is Managing Director of global conformance certification programs at the International Society of Automation. He directs the ISASecure automation and control systems cybersecurity certification program which uses the ISA/IEC 62443 (IEC 62443) standards. 

Mr. Ristaino is an international presenter on the IEC 62443 standards, control systems certification and application to key vertical industries including traditional process industries, building management systems and medical systems. He is an invited expert to the ERNCIP in support of the EU control systems cybersecurity certification initiative, an advisor for an ORNL research project on malware in the bulk electric distribution network, an invited presenter on cybersecurity and wireless technology at ARC Forums and, has published articles in the ISA InTech magazine. 

Prior to ISA, Mr. Ristaino held positions at NEMA, Renaissance Worldwide and, Deloitte & Touche Consulting’s Advanced Manufacturing Technology Group where he was a recognized leader in system lifecycle methodologies. Industries served include state and local government, utilities, USAF-LC, discrete manufacturing and, pharmaceutical and FDA regulated manufacturing sites. 

Mr. Ristaino earned a BS in Business Management from the University of Maryland, College Park and an MS in Computer Systems Applications from the American University in Washington DC with a focus on expert systems and artificial intelligence.Mr. Ristaino holds an APICS CPIM certification. 

Jason ChristmanVice President, Chief Product Security OfficerJohnson Controls

Jason Christman is Vice President and Chief Product Security Officer for Johnson Controls. He defines product cybersecurity strategy for the company and leads the Global Product Security organization in its mission to manage full lifecycle risk across the company’s diverse portfolio of smart building technologies, industrial IoT products, and data analytics platforms. He oversees development and deployment of differentiated capabilities that drive security and privacy by design, secure software development, advanced security monitoring, and coordinated incident response.

Jason has been a leader in control systems cybersecurity throughout his career and was an original member of ISA SP99 and co-author of the ANSI/ISA Technical Report on Integrating Electronic Security into the Manufacturing and Control Systems Environment. He is an expert in the human dimension of cybersecurity and draws from his military and industry experience in cognitive behavioral analytics to drive cybersecurity culture change.

Jason has a B.S. in Computer Science from Villanova University and a M.S. in Computer Science from Johns Hopkins University.