OTORIO secures ISO 27001, IEC 62443-4-1 certifications for critical infrastructure

September 18, 2023

OTORIO Launches Risk Assessment Technology for OT Security with Integrated Advanced Attack Graph Analysis

OT cyber risk management solutions company OTORIO announced its ISO 27001 certification for information security management systems (ISMS) and IEC 62443-4-1, a global benchmark for cybersecurity in industrial automation and control systems (IACS). These certifications further establish OTORIO’s position in the operational technology (OT) sector and its commitment to fostering a secure, reliable, and cyber-resilient future.

“OTORIO is an OT security company underpinned by a customer-centric culture. We take great pride in supporting the needs of our customers and partners with the highest quality OT security products and services,” Daniel Bren, co-founder and CEO of OTORIO, said in a media statement last week. “These certifications are the result of an intensive, company-wide collaboration among OTORIO management, CISO, R&D, security architects, customer success, product, and other teams. We are thrilled that our CPS systems have undergone stringent independent testing to achieve the highest cybersecurity standards.”

During the rigorous audit process, OTORIO demonstrated compliance with the ISO 27001 framework for managing information security risks, resulting in bolstered stakeholder trust and enhanced security. The attainment of ISO 27001 certification signifies the company’s commitment to continuously maintaining these standards to improve products and services.

For the IEC 62443-4-1 certification, OTORIO was evaluated on seven process requirement categories, including security management, security requirements, secure by design, secure implementation, security verification and validation testing, management of security-related issues, security update qualification, and security guidelines. The company passed each external audit.

Beyond its own compliance, OTORIO extends its commitment by ensuring third-party vendors align with ISO and IEC standards, providing an added layer of confidence that no new risks are introduced into the environment, according to the company. “This approach builds trust with customers and partners, reaffirming our commitment to becoming the must-have OT security risk management platform for Industrial organizations looking to assess, monitor, and mitigate OT cyber risk pre-exposure,” it added.

In June, OTORIO announced advancement in OT security with the availability of its Attack Graph Analysis technology, integrated into the company’s Cyber Digital Twin (CDT) model. The release of the Attack Graph Analysis follows last month’s patent secured by OTORIO from the U.S. Patent and Trademark Office (USPTO) for its risk management model and attack graph analysis algorithm.