CIP Security earns IEC 62443‍-‍4‍-‍2 certification

ODVA has announced that CIP Security has been formally certified by TÜV Rheinland to meet the applicable requirements of IEC 62443-4-2 at Security Level Capability 3 (SL-C 3).

Security Level 3 protects against intentional violation using sophisticated means from attackers with moderate resources, IACS-specific skills, and moderate motivation. Achieving formal certification that the CIP Security Specification complies with the IEC 62443 standard reinforces the position of the technology as the definitive security framework for EtherNet/IP products, simplifying the compliance path for product manufacturers incorporating CIP Security.

IEC 62443-4-2, part of the IEC 62443 series, defines the technical cybersecurity requirements for components used in an industrial automation and control system (IACS). CIP Security is an application layer network extension of EtherNet/IP that provides data integrity (rejecting altered data), authentication (verifying trusted identities), authorisation (blocking unauthorised commands), and confidentiality/encryption via TLS and DTLS for automation devices. Certification of CIP Security, and use of this technology in products, significantly lowers the barrier for product manufacturers seeking to achieve their own IEC 62443-4-2 certification.

“Achieving this certification is a significant accomplishment and further strengthens the position of EtherNet/IP as a leading secure industrial network technology,” said Dr Al Beydoun, President and Executive Director of ODVA. “This represents an important milestone for EtherNet/IP technology and further demonstrates ODVA’s commitment to advancing secure industrial communications and supporting the cybersecurity needs of our members and the broader industrial automation community.”

Image credit: iStock.com/Organic Media