Cybersecurity accreditation in Germany.

Deutsche Akkreditierungsstelle GmbH (DAkkS), the accreditation body for certification bodies in Germany, signed a memorandum of understanding (MOU) with the ISA Security Compliance Insititue (ISCI) to provide accreditation for Germany-based ISCI ISASecure certification bodies.

All conformity assessment bodies (CB) for the ISCI ISASecure® industrial automation and control systems (IACS) conformity assessment (CA) scheme must meet ISO/IEC 17065 and ISO/IEC 17025 requirements in addition to the ISASecure requirements for technical readiness.

The ISASecure CBs are independently assessed by ISO/IEC 17011 (EN 45011) accreditation bodies (AB) for initial accreditation and are audited annually by the AB to ensure that the CB maintains qualifications for participation in the ISASecure CA scheme.

“Establishing the ISASecure IACS certification as an ISO/IEC 17065 conformance scheme ensures that the accredited CBs providing ISASecure certifications are qualified for assessing complex industrial control systems, are credible, and have no conflicts of interest,” stated Andre Ristaino, ISCI managing director. “In addition, through the EA, ILAC, and IAF multilateral recognition arrangements among the accredited CBs, the ISASecure certificates of conformance are formally recognized by signatory labs in jurisdictions around the globe.”

The ISASecure CA scheme is a standards-based certification that assesses the cybersecurity of IACS products and systems to the IEC 62443 international standards governing control systems cybersecurity.