CERTINALIA, belonging to the TECNALIA Group, has been accredited by ENAC for carrying out product certification activities in accordance with the UNE-EN IEC 62443 series of standards (parts 4-1 and 4-2), whose main objective is to support the management of component vulnerabilities in industrial automation and control systems (IACS) against cyberattacks and to implement measures that mitigate them.

The purpose of the UNE-EN IEC 62443 series of standards is to establish a link between cybersecurity and IACS, defining a series of minimum requirements to achieve increasingly rigorous security levels that help improve safety in industrial environments. This series of standards aims to increase the protection of IACS throughout their entire lifecycle, and is aimed at three key roles directly related to automated solutions: the owners who work with and maintain them, the system integrators who are responsible for their design and deployment, and the product suppliers who develop and maintain components used in them.

Specifically, the UNE-EN IEC 62443-4-1 standard describes the lifecycle requirements for the secure product development process, defining four maturity levels (Maturity Level, ML), of which CERTINALIA has established a certification system for two categories according to the compliance level with the standard: Basic level and Advanced level.

CERTINALIA, thereby, becomes the first accredited certification body in Spain to carry out this activity. With ENAC’s accreditation, in accordance with the requirements of the UNE-EN ISO 17065 standard, users of cybersecurity assessment services on IACS system components, such as those offered by CERTINALIA, will have a higher level of confidence when turning to a body that has demonstrated its technical competence to deliver reliable results in its control activities.