Johnson Controls earns world’s first ISASecure® component security assurance certification for a smart buildings product

The ISASecure Program announced that Johnson Controls, the global pioneer for smart, healthy, and sustainable buildings, has earned the world’s first ISASecure CSA certification for its smart buildings products with YORK YK and YZ centrifugal chillers.

Industrial control suppliers can earn ISASecure designations for robust products that are free from recognised liabilities. This certification comes at a time when cybersecurity threats are rising and businesses are considering the potential vulnerabilities of unprotected building infrastructures.

It provides Johnson Controls customers with the assurance that each chiller product(s) meets the technical security requirements for IACS components as defined in the internationally recognised ISA/IEC62443-4-2 cybersecurity standards and is developed by the internationally recognised ISA/IEC 62443-4-1 cybersecurity standard.

Cyber-resilient building solutions

“We understand what’s at stake for our customers. That’s why Johnson Controls is committed to bringing cyber-resilient building solutions to market. The ISASecure certification recognises this commitment and provides reassurance at a time when cyber threats to operational technology are increasing,” said Jason Christman, vice president, and chief product security officer, Johnson Controls.

ISASecure certification provides reassurance at a time when cyber threats to operational technology"

“The YORK YK and YZ chiller ISASecure product certification are the first in the chiller industry, demonstrating Johnson Controls’ leadership in proactively securing our products and solutions as well as our customers’ peace of mind," said Joe Villani, director of controls engineering, Johnson Controls.

ISA/IEC 62443 standards

With over a decade of cybersecurity certification leadership in the automation and controls market, the ISASecure program has now demonstrated the effectiveness of the ISA/IEC 62443 family of standards for securing and certifying smart buildings technology.

The ISASecure program was established to independently certify the cybersecurity of operational technology and automation control systems, such as those deployed within smart buildings.

ISASecure certification

The ISASecure CSA certification provides assurances that the security capabilities of components, such as software applications, embedded devices, host devices, and network devices, conform to requirements in the ISA/IEC 62443 standards.

The ISASecure SDLA certification assures that Johnson Controls product development security practices, including the OpenBlue platform that can integrate seamlessly with the YORK YK and YZ chillers, conform to the ISA/IEC 62443-4-1 security lifecycle standard. Johnson Controls received the ISASecure CSA conformance certificate from Exida LLC, an ISASecure and ISO 17065 accredited certification body.

CSA certification

ISASecure certification program CSA focuses on the security of software applications, and network devices

"Johnson Controls continues to demonstrate leadership in cybersecurity for smart buildings,” said Mike Medoff, director of the cybersecurity certification at Exida.

“The ISASecure certification program Component Security Assurance (CSA) focuses on the security of software applications, embedded devices, host devices, and network devices. The CSA certification of Johnson Controls YZ and YK Centrifugal Chillers is an industry first and demonstrates Johnson Controls commitment in bringing cyber resilient solutions to the market.”

Smart building technology

“A number of manufacturers have committed to the ISA/IEC 62443 standards for smart building technology,” said Andre Ristaino, managing director, Automation Standards Compliance Institute and director of ISAGCA.

“Johnson Controls is the first to formally certify a smart building product under the ISASecure certification scheme. Johnson Controls has been an enthusiastic supporter of both the ISA/IEC 62443 international cybersecurity standard and has demonstrated leadership in securing automation that affects our everyday lives.”