This certification reinforces the company’s commitment to delivering secure-by-design cybersecurity solutions for operational technology (OT), critical infrastructure (CI), and industrial automation and control systems (IACS).
This builds upon Fortinet’s Secure Product Development Lifecycle, previously validated through IEC 62443-4-1 Maturity Level 2 (ML2) certification, which shows the company’s development processes and the resulting product meet internationally recognized cybersecurity standards and satisfy security requirements defined for secure IACS components.
Achieving SL4 represents the highest assurance level defined in IEC 62443-4-2. It demonstrates that FortiOS v7.6.x incorporates advanced security capabilities to mitigate highly sophisticated cyberthreats and provides independently validated protection for OT and CI environments.
Independent Validation
For organizations operating in critical infrastructure, manufacturing facilities, utilities, transportation systems, mining, oil and gas, and other industrial environments, this certification provides independent validation that FortiOS incorporates security controls aligned with internationally recognized cybersecurity standards.
As part of the certification, FortiOS v7.6.x successfully satisfied IEC 62443-4-2 requirements across all seven foundational requirement categories. Those categories include: Identification and authentication control, use control, system integrity, data confidentiality, restricted data flow, timely response to events and resource availability.
In addition to component requirements, FortiOS met all applicable requirements for software application, embedded device, host device, and network device evaluated as part of the certification.
IEC 62443 Security Levels.
Source: Fortinet
Moreover, achieving IEC 62443-4-2 SL4 certification complements Fortinet’s previously announced IEC 62443-4-1 ML2 certification. The company said this demonstrates that security remains embedded throughout the product development lifecycle and in the delivered product.
Together, these certifications demonstrate that:
- Products end up developed using independently validated secure development practices.
- Product cybersecurity capabilities have independently undergone evaluation against IEC 62443-4-2.
- Users receive both a secure development process and a technically validated product.
Click here for more information from Fortinet.
Click here to view the certificate on the Trust Resource Center.