News
S2OPC awarded the Security visa from ANSSI for the CSPN
November 2023 by Marc Jacob
Systerel, has been awarded the Security visa, issued by the French National Cybersecurity Agency (ANSSI), for the CSPN (First Level Security Certification) for its products S2OPC, the safe & secure open-source OPC UA stack. Thanks to this huge milestone, S2OPC becomes the OPC UA market’s pioneer in obtaining the Security visa from ANSSI, highlighting its unwavering commitment to providing unmatched security.
Commitment to cybersecurity in industry 4.0
OPC UA is the key communication standard of industry 4.0, enabling seamless and secure data exchange between different devices and platforms. It plays a pivotal role in the evolution of smart factories, ensuring interoperability, data integrity, and robust security.
The ANSSI Security visa rewards Systerel’s strong commitment to deliver secure and trustworthy components by meeting strict cybersecurity standards.
A rigorous certification process
The CSPN certification attests to the robustness of products in accordance with the rigorous requirements established by ANSSI using methodologies that best meet the security needs of users and take into account technological developments. It is widely recognized and trusted by the French administration and industries.
The certification involves a comprehensive conformity analysis and rigorous penetration tests carried out by an independent third-party assessor (CESTI), under the authority of ANSSI. The evaluation encompasses a 35 man-days scrutiny, analyzing the product conformity to its security specifications; measuring the effectiveness of the security functions and the impact of the product on the security of the host system , as well as a cryptographic analysis . This certification attests to the robustness and the reliability of S2OPC.
A mutual recognition in France and Germany
Currently, there is a strong demand for certified cybersecurity solutions at the European level.
Thanks to the intensive cooperation between French and German cybersecurity agencies, a mutual recognition of certificates has been established . Hence, S2OPC benefits from BSZ certification: the German equivalent of CSPN.
This reduces the need for manufacturers to undergo multiple certification procedures in different markets, reducing costs and trade barriers.
S2OPC: a double certification for unmatched security
S2OPC stands out from its competition by becoming the first implementation of the OPC UA standard certified by both the OPC Foundation and ANSSI. This dual certification assures users of unmatched levels of security.
Systerel has already deployed S2OPC within the systems of several major companies including Alstom Transport, CIMO (Compagnie Industrielle de Monthey SA), CNES (French National Centre for Space Studies), RTE (France’s Transmission System Operator) and Schneider Electric.
