Honeywell's ControlEdge PLC First To Be Awarded ISASecure Level 2 Certification

Advanced controller recognized for robust cybersecurity characteristics and capabilities

The ISA Security Compliance Institute announced recently that Honeywell’s ControlEdge Programmable Logic Controller (PLC) has received ISASecure Embedded Device Security Assurance (EDSA) Level 2 certification by exida, the ISO 17065 accredited certification body that conducted the assessment. The certification recognizes the integrity of both the PLC and its development lifecycle, and includes rigorous communication robustness testing as well as functional and software development security assessments.

ControlEdge PLC, from Honeywell Process Solutions (HPS), is the first PLC to be awarded the ISASecure Level 2 certification, which builds on the Level 1 capabilities by providing additional security features such as: the confidentiality and integrity of data at rest and in motion; detection of unauthorized changes; and additional protection against Denial of Service attacks. The ISASecure-compliant controller has advanced features including a secure boot capability to prevent uploading of unauthorized software and a built-in firewall. PLC communication can also be secured using IPSec to prevent man-in-the-middle attacks and unauthorized access.

“In the current operational environment, a strong cyber security defense is an essential part of control system safety and availability,” said Andrew D’Amelio, vice president and general manager of HPS’ Process Measurement and Control business. “That defense starts with industrial control devices such as PLCs that are resilient to rogue communications and unauthorized access, and developed with a security mindset.”

The ISASecure program has been developed by the ISA Security Compliance Institute (ISCI) based upon the ISA/IEC 62443 series of standards, with a goal to improve cybersecurity for industrial automation and control systems.

“ISASecure EDSA is the first of three certifications offered by ISCI, and focuses upon the security of embedded devices and supplier development practices for those devices,” said Andre Ristaino, ISCI managing director. “The level 2 EDSA certification of Honeywell’s PLC is an industry first and demonstrates Honeywell’s leadership in securing control systems technology.”

ControlEdge PLC is used in a variety of balance-of-plant control applications, such as water treatment, pump systems, and material handling. It is part of a next generation family of controllers offering unprecedented, secure connectivity through all levels of process and business operations.

Honeywell’s integrated Distributed Control System (DCS)/PLC approach provides a significant reduction in integration efforts and project costs. This is achieved through seamless integration of a DCS with PLC, Remote Terminal Unit (RTU), HART field device asset management, and HMI panel PC. Only Honeywell can serve as a single vendor for all these automation requirements. This combination also minimizes downtime through unified support, and lowers total cost of ownership through an extended system lifecycle. In addition, ControlEdge PLC provides an Industrial Internet of Things (IIoT)-ready open platform using OPC Unified Architecture (OPC UA) as a communication protocol.

For more information, visit www.honeywellprocess.com/plc.

About Honeywell Process Solutions
Honeywell Process Solutions is a pioneer in automation control, instrumentation and services for the oil and gas; refining; pulp and paper; industrial power generation; chemicals and petrochemicals; biofuels; life sciences; and metals, minerals and mining industries. It is also a leader in providing software solutions and instrumentation that help manufacturers find value and competitive advantage in through Honeywell Connected Plant, Honeywell’s Industrial Internet of Things (IIoT) solution. Process Solutions is part of Honeywell’s Performance Materials and Technologies strategic business group, which also includes Honeywell UOP (www.uop.com), a leading international supplier and licensor of process technology, catalysts, adsorbents, equipment, and consulting services to the petroleum refining, petrochemical, and gas processing industries. For more information, visit www.honeywellprocess.com.

Honeywell is a Fortune 100 software-industrial company that delivers industry specific solutions that include aerospace and automotive products and services; control technologies for buildings, homes, and industry; and performance materials globally. Our technologies help everything from aircraft, cars, homes and buildings, manufacturing plants, supply chains, and workers become more connected to make our world smarter, safer, and more sustainable. For more information, visit www.honeywell.com.

About The ISA Security Compliance Institute (ISCI)
Founded in 2007, the ISA Security Compliance Institute’s mission is to provide the highest level of assurance possible for the cyber security of industrial automation control systems (IACS).

The Institute was established by thought leaders from major organizations in the industrial automation controls community seeking to improve the cyber security posture of Critical Infrastructure for generations to come. ISCI Members include Chevron, ExxonMobil, Aramco Services, Honeywell, Invensys (now Schneider Electric), Yokogawa, exida, Codenomicon, CSSC, and IPA-Japan.

The Institute’s goals are realized through industry standards compliance programs, education, technical support, and improvements in suppliers’ development processes and users’ life cycle management practices. The ISASecure designation ensures that IACS products conform to industry consensus cyber security standards such as IEC 62443, providing confidence to users of ISASecure products and systems and creating product differentiation for suppliers conforming to the ISASecure specification. For more information, visit www.isasecure.org.