ISASecure Introduces ACSSA Certification for Enhanced Security
The International Society of Automation (ISA) has unveiled a significant initiative, aimed at optimizing security protocols for industrial automation systems. The new inspection and certification scheme, known as the Industrial Automation Control System Security Assurance (ACSSA), is set to streamline the process by which organizations assess their security conformity.
Overview of the ACSSA Scheme
Dr. Mark DeAngelo, the program manager for ISASecure, provided insights during a recent summit in which the ACSSA was officially announced. This certification serves as a standardized approach for evaluating industrial automation control systems (IACS) compliance with the well-regarded ISA/IEC 62443 series of standards. These guidelines encompass a wide range of policies, procedures, and technical controls essential for ensuring robust security.
Benefits of the ACSSA Program
The introduction of the ACSSA program is expected to facilitate a consistent security posture across various sites, bridging the gaps often associated with disparate internal policies and external audits. By adopting this new framework, asset owners can collaborate with service providers, regulatory bodies, and other stakeholders to create a common understanding of risk, thereby reducing liability and ensuring compliance.
“ISASecure is proud to announce our newest program, the ACSSA inspection and certification scheme,” stated DeAngelo. The initiative is designed to boost communication and understanding across all parties involved in industrial automation, paving the way for improved security measures, and ensuring a more unified approach to risk management.
Assessment Process Under ACSSA
The ACSSA scheme will assess the conformity of IACS by closely examining associated processes, procedures, and the support provided by service providers. One vital aspect of the evaluation includes reviewing the asset owner's risk assessment methods and their effectiveness. This risk-based strategy not only evaluates existing controls but also enhances future security capabilities.
Training and Awareness Initiatives
To foster knowledge and understanding of the new certification standards, ISASecure is set to launch a comprehensive three-day training course in early fall 2025, to be held at ISA's headquarters. An online variant of the training will also become available later in 2025 to ensure accessibility for a wider audience.
This training is part of ISA's commitment to providing educational resources accredited by the International Accreditors for Continuing Education and Training (IACET). Individuals interested in learning more about ACSSA training opportunities can stay informed as details are released in the near future.
About ISASecure
Established in 2007, ISASecure has evolved into a pivotal certification program that focuses on the cybersecurity measures of industrial automation control systems. By adhering to the rigorous ISA/IEC 62443 standards, ISASecure helps validate that automation products and practices align with internationally recognized safety benchmarks.
With a broad ecosystem that includes industry titans like Chevron and Honeywell, the introduction of ACSSA represents a commitment to enhancing the security of automation systems on a global scale. This assessment scheme allows for thorough evaluations against critical ISA/IEC standards, ensuring that organizations maintain optimal security levels.
About ISA
The ISA has been at the forefront of the automation profession since its inception in 1945. This non-profit association is dedicated to improving automation for a better world and empowers the automation community by sharing knowledge and developing industry standards. Through various initiatives, including certification programs and educational resources, ISA continues creating a support system for professionals worldwide. Interested parties can find out more about ISA's offerings and programs at their official website.
Frequently Asked Questions
What is the ACSSA certification scheme?
The ACSSA certification scheme is designed to evaluate the conformity of industrial automation systems to established security standards, promoting a consistent approach to security across the industry.
How does the ACSSA benefit organizations?
By using a common framework, organizations can improve their security postures, reduce compliance gaps, and collaborate effectively with various stakeholders to manage risk.
When is the training for ACSSA launching?
The first ACSSA training course will be available in early fall 2025, with an online version to follow later that year.
What standards does the ACSSA align with?
The ACSSA certification aligns with the ISA/IEC 62443 series of standards which govern the security requirements for IACS.
How can individuals get involved with ISASecure's programs?
Individuals can stay updated on ISASecure’s programs by following announcements regarding certifications and training courses offered by ISA.
