ODVA says CIP Security is certified by TÜV Rheinland to IEC 62443-4-2 SL-C 3, supporting compliance for EtherNet/IP products.
ODVA announced that CIP Security has been certified by TÜV Rheinland to meet the applicable requirements of IEC 62443-4-2 at Security Level Capability 3 (SL-C 3). Security Level 3 protects against intentional violation using sophisticated means from attackers with moderate resources, IACS specific skills and moderate motivation. The certification provides additional confirmation that the CIP Security Specification complies with the IEC 62443 standard and may help manufacturers usingEtherNet/IP products meet compliance requirements.
This is relevant for readers of Control Engineering because interest in cybersecurity has increased among automation, controls and instrumentation end users, system integrators, OEMs and machine builders. Integrating cybersecurity across the automation lifecycle, including industrial networking design, specification, implementation, use and maintenance, can reduce risk and help limit the impact of cybersecurity breaches.
IEC 62443-4-2, part of the IEC 62443 series, sets out the technical cybersecurity requirements for components used in industrial automation and control system (IACS). CIP Security is an application layer extension of EtherNet/IP that provides data integrity, authentication, authorization and confidentiality through TLS and DTLS for automation devices.
Certification of CIP Security and use of this technology in products can lower the effort for manufacturers seeking IEC 62443-4-2 certification. This certification also supports CIP Security as a tool that can help address requirements under the European Union (EU) Cyber Resilience Act (CRA) related to confidentiality, integrity and authentication. The CRA was created to improve cybersecurity in products with digital elements and connectivity, and it applies to many products used in operational technology (OT) applications.
“Achieving this certification is a significant accomplishment and further strengthens the position of EtherNet/IP as a leading secure industrial network technology,” said Dr. Al Beydoun, president and executive director of ODVA. “This represents an important milestone for EtherNet/IP technology and further demonstrates ODVA’s commitment to advancing secure industrial communications and supporting the cybersecurity needs of our members and the broader industrial automation community.”
Edited by Puja Mitra, Arrowfly, for Control Engineering, from an ODVA news release.
