The ISA Security Compliance Institute (ISCI) announced that Honeywell is the first industry vendor to earn the ISASecure Embedded Device Security Assurance (EDSA) certification for an industrial control systems product. The award recognizes Honeywell’s commitment to stringent cyber security standards and the security of Honeywell’s control systems products.
The formal announcement was made during the Honeywell HUG event this summer. Honeywell Process Solutions (HPS) is the first process industry vendor to be certified. The award recognizes the integrity of both the embedded Safety Manager device and its production lifecycle, and follows rigorous testing against communication robustness, functional security and software development security.
Safety Manager delivers safety assurance for operators who oversee industrial processes. The solution helps lower the cost of safety and improves performance by reducing the risk of incidents, maximizing production uptime, reducing the cost of compliance and providing productivity tools that help manage safety in industrial plants.
The ISASecure™ EDSA certification provides Honeywell’s customers–and their procurement teams–the extra reassurance that Safety Manager can deliver on its promises.
“Honeywell continues to demonstrate leadership for ensuring cyber security of industrial automation and control systems,” commented Andre Ristaino, ISCI managing director. “Being the first supplier to submit products for the ISASecure EDSA certification was courageous and demonstrates Honeywell’s commitment to security.”
ISASecure certified devices are registered on the ISCI website at www.isasecure.org.
About the ISASecure EDSA Certification
The ISASecure program has been developed by the ISA Security Compliance Institute (ISCI) with a goal to accelerate industry-wide improvement of cybersecurity for Industrial Automation and Control Systems (IACS). It achieves this goal by offering a common industry-recognized set of device and process requirements that drive device security, simplifying procurement for asset owners and device assurance for equipment vendors.
ISASecure Embedded Device Security Assurance Certification (ISASecure EDSA), the first ISASecure certification, focuses on security of embedded devices and addresses device characteristics and supplier development practices for those devices. Through this certification, an embedded device that meets the requirements of the ISASecure specifications receives the ISASecure EDSA certification—a trademarked designation that provides instant recognition of product security characteristics and capabilities. ISASecure EDSA offers three certification levels for a device based on increasing levels of device security assurance: ISASecure Level 1 for Devices, ISASecure Level 2 for Devices, and ISASecure Level 3 for Devices.
The ISASecure EDSA certification is an ISO/IEC Guide 65 conformance scheme supporting ISCI’s goal to operate a globally recognized industrial automation controls cybersecurity certification program. This third-party accreditation by ANSI/ACLASS enhances the credibility and value of the ISASecure certification by attesting to the competence and qualification of ISCI certification bodies and laboratories. Visit www.ansi.org/isasecure for details on the ISASecure ANSI/ACLASS accreditation process. www.isasecure.org
About the ISA Security Compliance Institute
Founded in 2007, the ISA Security Compliance Institute’s mission is to provide the highest level of assurance possible for the cyber security of industrial automation control systems.
The Institute was established by thought leaders from major organizations in the industrial automation controls community seeking to improve the cyber security posture of Critical Infrastructure for generations to come. Founding Members include Chevron, ExxonMobil Research and Engineering, Honeywell, Invensys, Siemens, and Yokogawa.
The Institute’s goals are realized through industry standards compliance programs, education, technical support, and improvements in suppliers’ development processes and users’ life cycle management practices. The Institute’s ISASecure™ designation ensures that industrial automation control products conform to industry consensus cyber security standards, providing confidence to users of ISASecure™ products and systems and creating product differentiation for suppliers conforming to the ISASecure™ specification. www.isasecure.org
About Honeywell
Honeywell International (www.honeywell.com) is a Fortune 100 diversified technology and manufacturing leader, serving customers worldwide with aerospace products and services; control technologies for buildings, homes and industry; automotive products; turbochargers; and specialty materials. Based in Morris Township, N.J., Honeywell’s shares are traded on the New York, London, and Chicago Stock Exchanges. For more news and information on Honeywell, please visit www.honeywellnow.com. Honeywell Process Solutions is part of Honeywell’s Automation and Control Solutions group, a global leader in providing product and service solutions that improve efficiency and profitability, support regulatory compliance, and maintain safe, comfortable environments in homes, buildings and industry. For more information about Process Solutions, access www.honeywell.com/ps.