Brussels, Belgium (News release) - The International Society of Automation (ISA) -- the leading professional society for automation -- has announced the upcoming rollout of the ISASecure® Industrial Automation Control System Security Assurance (ACSSA) inspection and certification scheme. ISASecure program manager Dr. Mark DeAngelo shared early details on the new initiative at the ISA OT Cybersecurity Summit today in Brussels.
The ISASecure ACSSA inspection and certification scheme will offer a common industry-vetted method for evaluating conformity of an industrial automation and control system (IACS) to the ISA/IEC 62443 series of standards, which includes all policies and procedures, service providers and technical security controls.
"ISASecure is proud to announce our newest program, the ACSSA inspection and certification scheme," DeAngelo said. "ACSSA's consistent approach benefits everyone -- including asset owners, insurance providers, product suppliers, service providers, conformity assessment bodies and government bodies -- allowing all to share a common understanding of facility risk."
ACSSA was formulated to help bridge lingering gaps in operational site assurance. Despite the comprehensive nature of ISASecure and cybersecurity expert programs, asset owners have relied on a patchwork of internal policies and third-party audits that vary across sites, leading to inconsistent security postures, compliance gaps, increased risk exposure, increased liability and regulatory non-compliance. ACSSA aligns all stakeholders around a consistent, standards-based program, contributing to a more secure and resilient environment for asset owners.
ISASecure's ACSSA evaluates conformity to the ISA/IEC 62443 requirements by verifying processes, procedures, support from service providers and the configuration and utilization of control systems capabilities. As the ISA/IEC 62443 framework offers a risk-based approach, ACSSA evaluation begins with reviewing the asset owner's risk assessment process and the results of that process.
The first three-day training course for ACSSA will be launched in early fall 2025 at ISA headquarters in Durham, North Carolina. An online version of the course will be offered in late 2025. ISA is accredited by the International Accreditors for Continuing Education and Training (IACET). Anyone interested in learning more about upcoming ACSSA training courses as they are announced may sign up here.
About ISASecure®
Founded in 2007 by the International Society of Automation (ISA), ISASecure® is a globally recognized certification program that provides assurance for the cybersecurity of industrial automation control systems (IACS). Through rigorous conformance to the ISA/IEC 62443 series of standards, ISASecure certifications validate that products and supplier practices meet internationally recognized benchmarks for OT security.
ISASecure's global ecosystem includes leaders such as Chevron, ExxonMobil, Honeywell, Johnson Controls, Schneider Electric, Trane Technologies, Utilities Technology Council and Yokogawa, among others. ISASecure's new ACSSA assessment scheme enables evaluation of asset owners' control systems against ISA/IEC 62443-2-1, 2-4, 3-2 and 3-3.
For more information, visit www.isasecure.org.
About ISA
The International Society of Automation (ISA) is a non-profit professional association founded in 1945 to create a better world through automation. ISA's mission is to empower the global automation community through standards and knowledge sharing. ISA develops widely used global standards and conformity assessment programs; certifies professionals; provides education and training; publishes books and technical articles; hosts conferences and exhibits; and provides networking and career development programs for its members and customers around the world. Learn more at www.isa.org.
