Johnson Controls Earns World’s First ISASecure Component Security Assurance Certification for a Smart Buildings Product

EIN ISA JC logo 400

November 12, 2021

As cybersecurity threats continue to rise, the ISASecure® cybersecurity program has taken a market-leading step into the smart buildings space.

ISASecure CSA certification of the YORK® YK and YZ Centrifugal Chillers exemplifies Johnson Controls leadership in bringing cyber-resilient solutions to the smart buildings market.

Certification to the ISA/IEC 62443-4-2 standard provides assurance that Johnson Controls and the YORK brand adhere to stringent ISASecure technical security requirements for IACS components.

Certification to the ISA/IEC 62443-4-1 standard provides assurance that Johnson Controls and the YORK brand adhere to stringent ISASecure development lifecycle requirements.

The ISASecure Program announced that Johnson Controls has earned the world’s first ISASecure CSA certification for its smart buildings products with YORK YK and YZ centrifugal chillers.

Industrial control suppliers can earn ISASecure designations for robust products that are free from recognized liabilities. This certification comes at a time when cybersecurity threats are rising and businesses are considering the potential vulnerabilities of unprotected building infrastructures. It provides Johnson Controls customers with assurance that each chiller product(s) meets the technical security requirements for IACS components as defined in the internationally recognized ISA/IEC62443-4-2 cybersecurity standards and is developed in accordance with the internationally recognized ISA/IEC 62443-4-1 cybersecurity standard.

“We understand what’s at stake for our customers. That’s why Johnson Controls is committed to bringing cyber-resilient building solutions to market. The ISASecure certification recognizes this commitment and provides reassurance at a time when cyber threats to operational technology are increasing,” said Jason Christman, vice president and chief product security officer, Johnson Controls.

“The YORK YK and YZ chiller ISASecure product certification is the first in the chiller industry, demonstrating Johnson Controls’ leadership in proactively securing our products and solutions as well as our customers’ peace of mind,” said Joe Villani, director of controls engineering, Johnson Controls.

With over a decade of cybersecurity certification leadership in the automation and controls market, the ISASecure program has now demonstrated the effectiveness of the ISA/IEC 62443 family of standards for securing and certifying smart buildings technology.

The ISASecure program was established to independently certify the cybersecurity of operational technology and automation control systems, such as those deployed within smart buildings.

The ISASecure CSA certification provides assurances that the security capabilities of components, such as software applications, embedded devices, host devices and network devices, conform to requirements in the ISA/IEC 62443 standards. The ISASecure SDLA certification assures that Johnson Controls product development security practices, including the OpenBlue platform that can integrate seamlessly with the YORK YK and YZ chillers, conform to the ISA/IEC 62443-4-1 security lifecycle standard. Johnson Controls received the ISASecure CSA conformance certificate from exida LLC, an ISASecure and ISO 17065 accredited certification body.

“Johnson Controls continues to demonstrate leadership in cybersecurity for smart buildings,” said Mike Medoff, director of cybersecurity certification at exida. “The ISASecure certification program Component Security Assurance (CSA) focuses on the security of software applications, embedded devices, host devices and network devices. The CSA certification of Johnson Controls YZ and YK Centrifugal Chillers is an industry first and demonstrates Johnson Controls commitment in bringing cyber resilient solutions to the market.”

“A number of manufacturers have committed to the ISA/IEC 62443 standards for smart building technology,” said Andre Ristaino, managing director, Automation Standards Compliance Institute and director of ISAGCA. “Johnson Controls is the first to formally certify a smart building product under the ISASecure certification scheme. Johnson Controls has been an enthusiastic supporter of both the ISA/IEC 62443 international cybersecurity standard and has demonstrated leadership in securing automation that affects our everyday lives.”

For more information about the ISASecure Program, please visit www.isasecure.org

Source

Related Articles


Latest Articles

  • Driivz: 2025 State of EV Charging Network Operators Report

    Driivz: 2025 State of EV Charging Network Operators Report

    May 19, 2025 As the EV charging industry is poised for profitability, network operators still face many challenges. But what are their biggest challenges, are they ready to scale up to support their business growth, and how will they provide drivers with a better charging experience in 2025. This report answers these questions and more,… Read More…

  • Electri International: Understanding, Identifying, and Measuring Rework

    Electri International: Understanding, Identifying, and Measuring Rework

    May 19, 2025 ELECTRI has sponsored a research project to create a playbook for electrical contractors that will help you: Unpaid rework refers to activities in the field (including prefabrication) that have to be done more than once, or activities that remove work previously installed as part of the project, where no change order has… Read More…

  • Intermatic Acquired by MPE Partners

    Intermatic Acquired by MPE Partners

    May 19, 2025 By David Gordon, Channel Marketing Group, President The Intermatic deal is done. It has been rumored for months that Intermatic was being sold. Strategic buyers and private equity firms were mentioned as expressing interest and reviewing “the book” throughout the fall (and some mentioned even last summer.) According to sources, it was a “challenge” for… Read More…

  • 6 Things Contractors Need To Know About the Security Kit for Wire Mesh Tray

    6 Things Contractors Need To Know About the Security Kit for Wire Mesh Tray

    May 19, 2025 The rapid expansion of data centers has brought about significant challenges in maintaining data security standards. According to Statistics Canada, recovery costs from cyber security incidents in 2023 were $2.1 billion, up from $600 million in 2021. This critical situation requires a more robust cable management design to protect data from being… Read More…


Changing Scene

  • Schneider Electric Canada Named One of Canada’s Greenest Employers for 2025

    Schneider Electric Canada Named One of Canada’s Greenest Employers for 2025

    May 19, 2025 Schneider Electric Canada has been recognized as one of Canada’s Greenest Employers for 2025 by Mediacorp Canada Inc. as part of the Canada’s Top 100 Employers project, a prestigious honour celebrating organizations that lead the country in creating a culture of environmental sustainability. This recognition highlights Schneider Electric’s long-standing commitment to advancing climate action, driving… Read More…

  • NEW ECAO Website is LIVE

    NEW ECAO Website is LIVE

    May 19, 2025 ECAO are excited to officially launch the new and improved ECAO website, redesigned with you in mind. Whether you are registering for training, accessing member resources, or staying up to date on key industry developments, ECAO’s new platform makes it faster, easier, and smarter. ECAO have rebuilt the site to deliver the ultimate… Read More…

  • Catalyst Sales and Marketing Announces New Partnership with MGM Transformers

    Catalyst Sales and Marketing Announces New Partnership with MGM Transformers

    May 19, 2025 Catalyst Sales and Marketing is proud to announce a new line partnership with MGM Transformer Company, a recognized provider of dry-type and liquid-filled transformers for commercial, industrial, and infrastructure applications. With over 50 years of expertise, MGM delivers custom-engineered, reliable, and energy-efficient solutions designed to meet the demands of data centers, renewable… Read More…

  • Intermatic Acquired by MPE Partners

    Intermatic Acquired by MPE Partners

    May 19, 2025 By David Gordon, Channel Marketing Group, President The Intermatic deal is done. It has been rumored for months that Intermatic was being sold. Strategic buyers and private equity firms were mentioned as expressing interest and reviewing “the book” throughout the fall (and some mentioned even last summer.) According to sources, it was a “challenge” for… Read More…