Johnson Controls Receives ISASecure® Component Security Assurance Certification
Issue
16 November 2021
Editor
Paul Scott
Editor in Chief
Amery Smock
Date
11/9/2021
-
Analysis
Johnson Controls announced it earned the world’s first ISASecure CSA certification for a smart buildings product with its YORK YK and YZ chillers [1]. YORK YK and YZ chillers are advertised as water-cooled, centrifugal chillers for use in any facility, ranging from schools to data centers. The ISASecure Component Security Assurance (CSA) is a certification program for control system components that focus on the security of software applications, embedded devices, host devices, and network devices (per IEC 62443-4-2) [2]. ISASecure currently lists 50 IEC 62443-4-2 certified components from various manufacturers on its website.
Industrial manufacturers are increasingly advertising cybersecurity capabilities with traditional factors, such as flexibility, performance, and efficiency. The ISASecure CSA adds legitimacy to a vendor’s claim of a secure product but does not absolve the user from exercising due diligence. In addition, the user should understand the specific requirements to obtain an ISASecure CSA certification. The user must still determine how the secure device fits into a more extensive system and what vulnerabilities still exist. -
Sources
[1] Johnson Control Press Release https://www.johnsoncontrols.com/media-center/news/press-releases/2021/11/09/isasecure-component-security-assurance-certification-for-a-smart-buildings-product
[2] ISASecure CSA Certification https://www.isasecure.org/en-US/Certification/IEC-62443-CSA-Certification
Analyst