ISASecure Partners with NSA to Develop High-Criticality OT Certification Scheme — The International Society of Automation

Event summary

ISASecure, a subsidiary of the International Society of Automation (ISA), is partnering with the NSA to develop a High Criticality Component Security Assurance (HCSA) certification scheme for commercial operational technology (OT) components used in National Security Systems (NSS).
The new certification scheme is derived from ISASecure's existing Component Security Assurance (CSA) certification and incorporates six new technical security requirements developed by the NSA's Operational Technology Assurance Partnership (OTAP) Program.
Upon completion and acceptance by the OTAP program office, the NSA will use the ISASecure HCSA scheme as an approved certification mechanism for adding OT OEM components to the NSS OT Product Compliant List (PCL).
The partnership aims to increase confidence in the security of commercial components used within high-criticality OT systems.

The big picture

This partnership between ISASecure and the NSA underscores the growing emphasis on cybersecurity in operational technology, particularly within national security systems. The development of the HCSA certification scheme is a strategic response to the increasing threats to OT systems and the need for standardized security measures. The collaboration highlights the importance of industry consensus standards in shaping government procurement policies and ensuring the resilience of critical infrastructure.

What we're watching

Certification Adoption: How quickly manufacturers of smart controllers will adopt the new HCSA certification scheme and whether it will become a de facto standard for high-criticality OT components.
Government Procurement: The impact of the HCSA certification on the procurement process for OT components within National Security Systems and whether it will streamline or complicate the evaluation process.
Industry Collaboration: The extent to which other standards bodies and industry players will collaborate with ISASecure and the NSA to further enhance OT security standards.