HIMA’s HIMax safety controller earned the new cyber security certificate from TÜV Rheinland.
The test agency certified the processor and the communications module in accordance with international standards IEC 62443-4-1, IEC 62443-4-2 and ISASecure EDSA 2.0.0.
The certificate is based on stringent testing and evaluation of all requirements regarding IT security over the entire lifetime of the safety controller, and it says the HIMax fulfils the requirements of security level SL 1.
The certification combines the highest safety (up to SIL 3) with IT security in a single system.
“We are pleased to be amongst the first companies in the world to receive the new cyber security certificate from TÜV Rheinland,” said Dr. Alexander Horch, head of research, development and product management at HIMA. “Successful certification is generally a prolonged and complicated process, which usually ties up a lot of resources.”
In the age of Industry 4.0 and IoT, industrial plants are no longer autonomous, but instead increasingly linked to the outside world. That means plant operation is only reliable when plant operators systematically implement cyber security measures in addition to functional safety. The key normative basis for this is the international standard IEC 62443, “IT security for industrial automation and control systems,” which specifies separate network levels with defined conduits. The newly developed cyber security certificate from TÜV Rheinland also conforms to this standard.
TÜV Rheinland tests controllers in accordance with the IEC 62443 standard (Part 4-1, Secure Product Development Lifecycle Requirements, and Part 4-2, Technical security requirements for IACS components).
HIMA additionally received the Embedded Device Security Assurance (EDSA) certificate from ISASecure.
ISASecure certification (ISASecure EDSA 2.0.0 – Level 1) is based on a test methodology derived from the IEC 62443 standard. Along with these two certificates, the cyber security of the HIMax controller is documented by an Achilles Level 1 certificate issued by the independent Canadian industrial security specialist Wurldtech.