Valmet has reached a significant milestone in industrial cybersecurity with its Valmet DNAe Distributed Control System (DCS): it is the world’s first fully web-based system to receive the ISASecure System Security Assurance (SSA) Security Level 1 certificate. The external assessment conducted by exida ensured that Valmet DNAe meets the strict security requirements and levels specified in the ISA/IEC 62443-3-3 standard. The Valmet DNAe reference architecture networks were precisely evaluated, configured, and tested according to network topology and component requirements.
Introduced in 2024, Valmet DNAe takes a modern and proactive approach to cybersecurity, enabling companies to effectively prevent and respond to evolving cyber threats. Valmet DNAe’s product development process was validated with the Security Development Lifecycle Assurance (SDLA) certification in 2020, ensuring that cybersecurity considerations are integrated into every stage of the system lifecycle.
“We believe that building security into the very foundation of our systems is the most effective way to protect our customers in today's evolving threat landscape. Valmet DNAe has now become the world’s first fully web-based DCS to reach system-level ISASecure SSA certification. The right technology decisions enable us to provide our customers with next-generation connectivity while elevating cybersecurity to new levels,” says Jukka Ylijoki, Vice President of R&D, Automation Systems, Valmet.
For IT teams, Valmet DNAe provides centralized user management and Active Directory (AD) integration, enabling role-based access control and authentication. Additionally, the system offers authorization, audit trails, secure communication, encryption mechanisms, content-signed software, and comprehensive logging. To support enterprise-level visibility, Valmet DNAe integrates with customers' Security Information and Event Management (SIEM) solutions, providing valuable information to Security Operations Center (SOC) teams. Customers are supported by extensive Valmet Cybersecurity Services.
