ODVA has announced that its CIP Security specification has been certified by TÜV Rheinland as compliant with the applicable requirements of IEC 62443-4-2 at Security Level Capability 3 (SL-C 3). The certification confirms that the technology meets cybersecurity requirements for components used in industrial automation and control systems (IACS).
CIP Security is an application-layer extension of EtherNet/IP designed to help secure industrial communications. The technology provides authentication to verify trusted identities, authorization to prevent unauthorized commands, data integrity mechanisms that reject altered data, and confidentiality through encryption using TLS and DTLS.
Simplifing compliance for equipment manufacturers
According to ODVA, achieving certification at SL-C 3 demonstrates protection against attackers using sophisticated methods, moderate resources and industrial control system expertise. The certification is intended to simplify the compliance process for equipment manufacturers developing EtherNet/IP-based products and pursuing their own IEC 62443-4-2 certification. The organization also states that the technology can support compliance efforts related to the European Union Cyber Resilience Act (CRA), which introduces cybersecurity requirements for products containing digital elements and network connectivity. By addressing key requirements such as confidentiality, integrity and authentication, CIP Security may assist manufacturers in implementing secure-by-design approaches for operational technology applications.
The certified specification is available as part of the latest EtherNet/IP documentation from ODVA.
