Honeywell Process Solutions’ (HPS) ControlEdge Programmable Logic Controller (PLC) earned ISASecure Embedded Device Security Assurance (EDSA) Level 2 certification by exida, the ISO 17065 accredited certification body who conducted the assessment.
The certification recognizes the integrity of the PLC and its development lifecycle, and includes rigorous communication robustness testing as well as functional and software development security assessments.
ControlEdge PLC is the first PLC to be awarded the ISASecure Level 2 certification, which builds on the Level 1 capabilities by providing additional security features such as the confidentiality and integrity of data at rest and in motion, detection of unauthorized changes and additional protection against Denial of Service attacks, officials said.
The ISASecure-compliant controller has features including a secure boot capability to prevent uploading of unauthorized software and a built-in firewall. PLC communication can also end up secured using IPSec to prevent man-in-the-middle attacks and unauthorized access.
“In the current operational environment, a strong cyber security defense is an essential part of control system safety and availability,” said Andrew D’Amelio, vice president and general manager of HPS’ Process Measurement and Control business. “That defense starts with industrial control devices such as PLCs that are resilient to rogue communications and unauthorized access, and developed with a security mindset.”
The ISASecure program has been developed by the ISA Security Compliance Institute (ISCI) based upon the ISA/IEC 62443 series of standards, with a goal to improve cyber security for industrial automation and control systems.
“ISASecure EDSA is the first of three certifications offered by ISCI, and focuses upon the security of embedded devices and supplier development practices for those devices,” said Andre Ristaino, ISCI managing director. “The level 2 EDSA certification of Honeywell’s PLC is an industry first and demonstrates Honeywell’s leadership in securing control systems technology.”
ControlEdge PLC sees action in applications in water treatment, pump systems, and material handling.