ISASecure

What ISASecure does

ISASecure is the industrial automation and control systems (IACS) cybersecurity certification program administered by the ISA Security Compliance Institute, a 501(c)(6) nonprofit wholly owned by the International Society of Automation (ISA) and based in Durham, North Carolina. Founded in 2007, ISASecure delivers conformance certifications built on the ISA/IEC 62443 standards family through a global network of ISO/IEC 17065 accredited certification bodies. Its certification portfolio covers components (CSA per IEC 62443-4-2), systems (SSA per IEC 62443-3-3), development organizations (SDLA per IEC 62443-4-1), industrial IoT components (ICSA, launched 2023), and operating-site assessments (ACSSA, scheduled rollout February 2026), with an earlier EDSA scheme also offered historically. Certification activity is conducted by accredited testing firms including UL Solutions, TÜV Rheinland, TÜV SÜD, Exida, FM Approvals, BYHON, IKERLAN, Perseus, and Palindrome Technologies.

ISASecure operates as a member-driven organization, with members spanning asset owner/operators (ExxonMobil, Chevron, BP, Shell, Saudi Aramco, GSK, Trane, YPF, ICE), automation suppliers (Honeywell, Siemens, Yokogawa, Rockwell, Schneider Electric), certification bodies, cloud providers (AWS), and newer entrants across insurance (AXA), industrial (Hitachi America), and consulting (NCC Group, ORBIK, Sword). The Governing Board is chaired by ExxonMobil's senior principal engineer for ICS cybersecurity with Chevron's ICS cybersecurity engineer as Vice Chair; ISA99 maintains a formal liaison. Members pay annual fees and receive reduced pricing on certification services; non-members pay higher fees.

The revenue model combines subscription-like annual membership fees with per-product professional-services certification fees (first ISASecure device certification reportedly $50K-$75K USD; no per-unit royalties). No per-unit royalties are charged for use of the ISASecure specification. Marketing reach runs through the isasecure.org website, webinars, industry conferences, LinkedIn, press releases, and a learning center of white papers and training resources. The organization targets suppliers seeking product differentiation and asset owners seeking standardized OT cybersecurity assurance across critical infrastructure sectors.

Name

ISASecure

Legal name

ISASecure (ISA Security Compliance Institute)

Website

https://isasecure.org

Company type

Private

Founded year

2007

Operating status

Operating

Headcount range

1–10 employees

Short description

ISASecure administers cybersecurity conformance certifications for industrial automation and control systems against the ISA/IEC 62443 standards, delivered through a global network of accredited certification bodies and serving asset owners, automation suppliers, integrators, and certification bodies in critical infrastructure sectors.

Ownership category

akta.pro rank

Product category

Industrial Cybersecurity Certification

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Services, Nec (8900)

akta.pro primary industry

Control System Cybersecurity for OT (ICS Security, Monitoring, Hardening) (IMAGABAL)

akta.pro secondary industry

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

Keywords

• Industrial cybersecurity certification
• OT security certification
• Control systems security
• IEC 62443 compliance
• IACS certification

Headquarters

HQ city

Triangle

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Membership Fees: ISASecure operates as a member-driven organization where members pay annual membership fees. Members include end users, suppliers, tool providers, cloud providers, and integrators who benefit from reduced pricing for certification services.
2. Product Certification Fees: Organizations pay registration fees to have devices certified. Member companies receive reduced pricing while non-members pay slightly higher registration fees. No per-unit royalties are charged for using the ISASecure specification. First device certification may range from $50,000-$75,000 USD.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels6 records

Core offering

ISASecure administers a cybersecurity certification program for industrial automation and control systems (IACS) based on the ISA/IEC 62443 standards family. The program certifies components, systems, supplier development organizations, IIoT components, and operating-site OT deployments through a global network of ISO/IEC 17065 accredited third-party certification bodies.

Product overview

ISASecure is a certification program that offers multiple industry-leading certifications for industrial automation and control systems (IACS) cybersecurity based on the ISA/IEC 62443 standards family. The portfolio includes Component Security Assurance (CSA) for individual components certified to IEC 62443-4-2, System Security Assurance (SSA) for complete systems certified to IEC 62443-3-3, Security Development Lifecycle Assurance (SDLA) for development organizations certified to IEC 62443-4-1, IIoT Component Security Assurance (ICSA) for industrial IoT devices, and ACSSA for site-level OT cybersecurity assessments. The program also previously offered Embedded Device Security Assurance (EDSA) certification. All certifications are conducted by a global network of ISO/IEC 17065 accredited certification bodies and are developed through a consensus-based process involving end users, suppliers, tool suppliers, cloud providers, and integrators.

Differentiator

Problem solved

Functional benefit

Products and services

• ISASecure CSA (Component Security Assurance) Certification program that verifies automation and control system components meet the security requirements specified in ISA/IEC 62443-4-2, ensuring products have the necessary security capabilities for deployment in industrial environments. For product suppliers and manufacturers of industrial control components.
• ISASecure SSA (System Security Assurance) Certification program that assesses and certifies industrial automation and control systems to ISA/IEC 62443-3-3 standards, verifying system-level security capabilities and conformance. For suppliers and integrators of complete industrial control systems.
• ISASecure SDLA (Security Development Lifecycle Assurance) Certification program that evaluates and certifies supplier development organizations against ISA/IEC 62443-4-1 standards, ensuring secure development practices are embedded in the product lifecycle. For industrial automation product development organizations.
• ISASecure ICSA (IIoT Component Security Assurance) Certification program for industrial Internet of Things (IIoT) components that verifies conformance to ISA/IEC 62443 standards for connected devices in industrial environments. For manufacturers of IIoT and connected industrial components.
• ISASecure ACSSA (IACS Cybersecurity Assurance) A unified OT site cyber assessment program that provides asset owners and plant managers with a single cybersecurity assessment scheme for operational technology deployed at operating sites, based on requirements from ISA/IEC 62443 parts 2-1, 2-3, 2-4, 3-2 and 3-3. For asset owners and operators of industrial sites.
• ISASecure EDSA (Embedded Device Security Assurance) Certification program for embedded control system devices involving organization reviews and hands-on testing of embedded devices, similar in scope to Safety Instrumented Systems certification (ISO/IEC 61508). For manufacturers of embedded industrial control devices.
• ISASecure Membership Annual membership program providing members with reduced pricing for certification services, influence over conformance specifications, and participation in the consensus-based standards development process. Open to end users, suppliers, tool providers, cloud providers, and integrators.

Quantifiable outcome

• First ISASecure device certification may range from $50,000-$75,000 USD

Named customers10 records

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

30 partnerships are on record, tiered core, strategic and flagship.

• Instituto Costarricense de Electricidad (ICE)coreStrategic or Co-development Partner · 28 July 2026ICE, Costa Rica's state-owned energy enterprise, has partnered with ISASecure to adopt ISA/IEC 62443 cybersecurity standards across the nation's energy sector. The collaboration aims to enhance operational technology security through measures including network segmentation, secure access management, and continuous monitoring of industrial systems. ICE becomes the first Costa Rican company to join the ISASecure program.
• Perseus Information Security ConsultingcoreTechnology or Integration · 9 June 2026Perseus Information Security Consulting became a fully accredited Certification Body for the ISASecure ACSSA Program, providing cybersecurity assessment services for OT deployed at operating sites.
• Palindrome TechnologiescoreTechnology or Integration · 30 April 2026Palindrome Technologies gained full accreditation to certify products to the ISASecure program, expanding the network of accredited certification bodies for component and system certifications.
• UL SolutionscoreTechnology or Integration · 8 December 2025UL Solutions became ISASecure's newest Certification Body to obtain accreditation for conducting ISASecure SDLA, CSA, SSA and ICSA certifications. Founded in 1894, UL Solutions is a global provider of safety and security certification services.
• Utilities Technology Council (UTC)strategicStrategic or Co-development Partner · 8 December 2025UTC joined ISASecure in 2025 following collaboration with ISA Global Cybersecurity Alliance on a whitepaper analyzing NERC CIP and ISA/IEC 62443 standards. UTC participated in webinars discussing comparative analysis between regulatory frameworks.
• SwordstrategicStrategic or Co-development Partner · 27 October 2025Sword joined both the ISA Global Cybersecurity Alliance (ISAGCA) and ISASecure to support cybersecurity standards and certification programs for industrial automation and control systems, enhancing adoption of ISA/IEC 62443 standards across global sectors.
• ExxonMobilflagshipStrategic or Co-development PartnerExxonMobil serves as Governing Board Chairman of ISASecure with senior principal engineer responsible for sustaining ICS cybersecurity strategy. Founding member and active strategic participant.
• ChevronflagshipStrategic or Co-development PartnerChevron serves as Governing Board Vice Chairman with ICS Cybersecurity Engineer acting as ICS Risk Assessment SME. Active member in ISA 62443 technical groups.
• ShellstrategicStrategic or Co-development PartnerShell is a member organization participating in ISASecure as part of the member-driven organization establishing strategy and developing conformance specifications.
• BPflagshipStrategic or Co-development PartnerBP was a founding member of ISASecure established in 2007 and continues as an active member organization.
• HoneywellflagshipStrategic or Co-development PartnerHoneywell was a founding member of ISASecure established in 2007 and continues as an active member and strategic participant.
• SiemensflagshipStrategic or Co-development PartnerSiemens was a founding member of ISASecure established in 2007 and continues as an active member organization.
• YokogawaflagshipStrategic or Co-development PartnerYokogawa was a founding member of ISASecure established in 2007 and continues as an active member organization.
• IKERLANcoreTechnology or IntegrationIKERLAN, a Spain-based knowledge transfer technology center, signed an agreement with ISASecure as a Certification Body for Automation and Control Systems Security, providing certification services in Europe.
• ExidacoreTechnology or IntegrationExida is an accredited Certification Body for ISASecure certifications and founding member organization.
• FM ApprovalscoreTechnology or IntegrationFM Approvals is an accredited Certification Body for ISASecure certifications and active member organization.
• TÜV SÜDcoreTechnology or IntegrationTÜV SÜD is an accredited Certification Body for ISASecure certifications and active member organization.
• TÜV RheinlandcoreTechnology or IntegrationTÜV Rheinland is an accredited Certification Body for ISASecure certifications and active member organization.
• BYHONcoreTechnology or IntegrationBYHON is an accredited Certification Body for ISASecure certifications.
• CSSCcoreTechnology or IntegrationCSSC is an accredited Certification Body for ISASecure certifications.
• International Society of Automation (ISA)flagshipStrategic or Co-development PartnerISASecure is a wholly owned subsidiary of ISA. ISA developed and publishes the ISA/IEC 62443 standards and provides organizational support and governance for ISASecure through the Automation Standards Compliance Institute (ASCI).
• ISA99 Standards CommitteeflagshipStrategic or Co-development PartnerThe ISA99 Committee is an Industry Participant member of ISASecure. A formal liaison exists between the ISA99 standards committee and ISASecure at the Governing Board level and Technical Steering Committee level.
• US-CERTstrategicStrategic or Co-development PartnerUS-CERT (United States Computer Emergency Readiness Team) is affiliated with ISASecure as part of the organization's affiliations supporting industrial automation and control system security.
• AXAstrategicStrategic or Co-development PartnerAXA joined ISASecure as a new member in 2025 as part of the organization's expanding membership base.
• Hitachi AmericastrategicStrategic or Co-development PartnerHitachi America joined ISASecure as a new member in 2025 as part of the organization's expanding membership base.
• NCC GroupstrategicStrategic or Co-development PartnerNCC Group joined ISASecure as a new member in 2025 as part of the organization's expanding membership base.
• ORBIKstrategicStrategic or Co-development PartnerORBIK joined ISASecure as a new member in 2025 as part of the organization's expanding membership base.
• Palindrome TechnologiesstrategicStrategic or Co-development PartnerPalindrome Technologies joined ISASecure as a new member in 2025 and subsequently gained accreditation as a Certification Body.
• Perseus Information Security ConsultingstrategicStrategic or Co-development PartnerPerseus Information Security Consulting joined ISASecure as a new member in 2025 and subsequently gained accreditation as a Certification Body for the ACSSA program.
• Sword IACSstrategicStrategic or Co-development PartnerSword IACS joined ISASecure as a new Supporter member in 2025 as part of the organization's expanding membership base.

Scale indicators3 records

Recent moves7 records

Expansion highlights6 records

Broad incumbents

• NCC Group: NCC Group is a global cybersecurity services firm offering OT/ICS security testing, certification, and advisory. As a new ISASecure member in 2025, it both participates in and competes with ISASecure's scheme through proprietary OT cybersecurity testing and assurance services.
• Bureau Veritas: Bureau Veritas is a global TIC firm that delivered the world's first ISASecure ISA/IEC 62443-4-2 industrial computer certification in partnership with Moxa. It serves as both an ISASecure CB and a competitor offering independent industrial cybersecurity certification services.
• SGS: SGS is one of the largest global TIC firms with industrial cybersecurity certification capabilities. As an indirect competitor to ISASecure's scheme, SGS offers independent industrial cybersecurity certification and testing services to the same supplier and asset-owner base.
• TÜV Rheinland: TÜV Rheinland is a global TIC giant with extensive industrial cybersecurity certification offerings. As an accredited ISASecure CB, it enables the program while also offering competing industrial cybersecurity certification schemes for the same supplier base.
• FM Approvals: FM Approvals is a TIC firm specializing in industrial product certification, and is an accredited ISASecure CB for component, system, and development organization certifications. It competes with ISASecure's scheme by offering proprietary industrial cybersecurity certification.
• UL Solutions: UL Solutions is a global TIC giant offering proprietary cybersecurity and safety certification programs across multiple industries, and is also an accredited ISASecure certification body. While it serves as an ISASecure CB, it competes with ISASecure in adjacent industrial cybersecurity certification schemes.
• TÜV SÜD: TÜV SÜD is a global TIC firm with industrial cybersecurity certification capabilities. It is an accredited ISASecure CB and competes with ISASecure's scheme by offering proprietary cybersecurity certifications in adjacent industrial verticals.

Direct peers

• Achilles Information: Achilles operates a supplier qualification and certification platform for OT/ICS environments, providing cybersecurity pre-qualification for industrial suppliers. It is the most directly comparable peer to ISASecure in administering standards-based OT/ICS supplier qualification programs.
• DNV: DNV provides industrial and maritime cybersecurity certification and assurance services, including OT security assessments and conformance schemes. DNV competes directly with ISASecure for industrial cybersecurity certification mandates from operators in energy, maritime, and process industries.
• Exida: Exida provides functional safety and cybersecurity certification services specifically for process industries and industrial automation. As both an accredited ISASecure certification body and an independent provider of competing process-industry safety/security certification, Exida competes directly for the same industrial cybersecurity certification budget.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/isasecure

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ISASecure