S2OPC receives ANSSI security visa for CSPN
Systerel has been awarded the Security visa by the French National Cybersecurity Agency (ANSSI) for the CSPN (First Level Security Certification) for its product S2OPC, the safe and secure open-source OPC UA stack.
This achievement marks S2OPC as the first in the OPC UA market to receive the Security visa from ANSSI, underlining its steadfast commitment to exceptional security.
Cybersecurity in Industry 4.0 OPC UA is a crucial communication standard in industry 4.0, facilitating secure and seamless data exchange across diverse devices and platforms. It is integral to the development of smart factories, ensuring interoperability, data integrity, and strong security. The ANSSI Security visa acknowledges Systerel's dedication to delivering secure and reliable components that adhere to stringent cybersecurity standards.
Rigorous certification process
The CSPN certification confirms the robustness of products against the stringent criteria set by ANSSI, employing methodologies that align with user security needs and technological advancements. Recognised and trusted by the French administration and industries, the certification involves an exhaustive conformity analysis and thorough penetration testing by an independent third-party assessor (CESTI), under ANSSI's authority. The evaluation, spanning 35 man-days, assesses product conformity to security specifications, evaluates the effectiveness of security functions, the product's impact on the host system's security, and includes a cryptographic analysis. This certification testifies to the robustness and reliability of S2OPC.
Mutual recognition in France and Germany
There is a growing demand for certified cybersecurity solutions at the European level. Due to close cooperation between French and German cybersecurity agencies, a mutual recognition of certificates has been established. Consequently, S2OPC also benefits from the BSZ certification, the German equivalent of CSPN, reducing the need for manufacturers to undergo multiple certifications in different markets, thereby saving costs and easing trade barriers.
S2OPC: Dual Certification for Exceptional Security S2OPC distinguishes itself by being the first OPC UA standard implementation certified by both the OPC Foundation and ANSSI. This dual certification provides users with unparalleled security assurance.
Vincent Pouzol, Products Department Manager at Systerel, stated: “With the CSPN and OPC Foundation certifications, S2OPC’s users are guaranteed a high level of trust in the implementation of the OPC UA cyber mechanisms and in the mitigation of the risks incurred by the assets to be protected.”
Systerel has implemented S2OPC in systems of various prominent companies, including Alstom Transport, CIMO (Compagnie Industrielle de Monthey SA), CNES (French National Centre for Space Studies), RTE (France's Transmission System Operator), and Schneider Electric.