ODVA is pleased to announce that CIP Security™ has been formally certified by TÜV Rheinland to meet the applicable requirements of IEC 62443-4-2 at Security Level Capability 3 (SL-C 3). Security Level 3 protects against intentional violation using sophisticated means from attackers with moderate resources, IACS specific skills, and moderate motivation. Achieving formal certification that the CIP Security Specification complies with the IEC 62443 standard reinforces the position of the technology as the definitive security framework for EtherNet/IP™ products, simplifying the compliance path for product manufacturers incorporating CIP Security.
IEC 62443-4-2, part of the IEC 62443 series, defines the technical cybersecurity requirements for components used in an industrial automation and control system (IACS). CIP Security is an application layer network extension of EtherNet/IP that provides data integrity (rejecting altered data), authentication (verifying trusted identities), authorization (blocking unauthorized commands), and confidentiality/encryption via TLS and DTLS for automation devices.
Certification of CIP Security, and use of this technology in products, significantly lowers the barrier for product manufacturers seeking to achieve their own IEC 62443-4-2 certification. This certification also firmly establishes CIP Security as the natural compliance tool to meet requirements imposed by the European Union (EU) Cyber Resilience Act (CRA) by satisfying core technical and secure-by-design requirements related to confidentiality, integrity, and authentication. The CRA was created to strengthen cybersecurity in a broad range of products with digital elements and connectivity, and it therefore pertains to many products used in all types of operational technology (OT) applications.
“Achieving this certification is a significant accomplishment and further strengthens the position of EtherNet/IP as a leading secure industrial network technology,” said Dr. Al Beydoun, President and Executive Director of ODVA. “This represents an important milestone for EtherNet/IP technology and further demonstrates ODVA’s commitment to advancing secure industrial communications and supporting the cybersecurity needs of our members and the broader industrial automation community.”
Visit www.odva.org to obtain the latest version of The EtherNet/IP Specification including CIP Security and to review PUB00365 “CIP Security: A Certified Foundation for IEC 62443-4-2”.
