First PLC to be awarded ISASecure Level 2 certification

Honeywell’s ControlEdge PLC has received ISASecure Embedded Device Security Assurance (EDSA) Level 2 certification from exida, the ISO 17065 accredited certification body that conducted the assessment. The certification recognises the integrity of both the PLC and its development life cycle, and includes rigorous communication robustness testing as well as functional and software development security assessments.

ControlEdge PLC, from Honeywell Process Solutions (HPS), is the first PLC to be awarded the ISASecure Level 2 certification, which builds on the Level 1 capabilities by providing additional security features such as: the confidentiality and integrity of data at rest and in motion; detection of unauthorised changes; and additional protection against denial-of-service attacks. The ISASecure-compliant controller has advanced features including a secure boot capability to prevent uploading of unauthorised software and a built-in firewall. PLC communication can also be secured using IPSec to prevent man-in-the-middle attacks and unauthorised access.

“In the current operational environment, a strong cybersecurity defence is an essential part of control system safety and availability,” said Andrew D’Amelio, vice president and general manager of Honeywell’s Process Measurement and Control business. “That defence starts with industrial control devices such as PLCs that are resilient to rogue communications and unauthorised access.”

The ISASecure program has been developed by the ISA Security Compliance Institute (ISCI) based upon the ISA/IEC 62443 series of standards, with a goal to improve cybersecurity for industrial automation and control systems.

“ISASecure EDSA is the first of three certifications offered by ISCI, and focuses upon the security of embedded devices and supplier development practices for those devices,” said Andre Ristaino, ISCI managing director. “The Level 2 EDSA certification of Honeywell’s PLC is an industry first.”

The ControlEdge PLC is used in a variety of balance-of-plant control applications, such as water treatment, pump systems and material handling.