TECNALIA, the first national entity accredited for testing at all levels of cybersecurity

The research and technological development centre has obtained ENAC (National Accreditation Entity) accreditation to certify the industry at the highest level of security in accordance with international standard IEC 62443-4-2

30 June 2025. The TECNALIA research and technological development centre has become the first national entity accredited by ENAC (National Accreditation Entity) to carry out cybersecurity testing at all security levels in accordance with the international standard IEC 62443-4-2. This standard, considered one of the pillars in the protection of industrial automation and control systems, establishes demanding technical cybersecurity requirements for the components of these systems. The accreditation recognises the laboratory’s technical competence to evaluate these products against increasingly sophisticated threats.

TECNALIA has thus obtained accreditation for testing at the four security levels stipulated by the standard, enabling it to cover environments with greater protection requirements against targeted threats and positioning the laboratory as a national and international benchmark in the evaluation of critical industrial components.

The IEC 62443-4-2 standard provides a detailed and scalable framework for establishing cybersecurity requirements for industrial components, such as embedded devices, application software and network devices, and protecting them against a wide range of threats. These requirements are structured into four Security Levels, ranging from accidental threats to protection against sophisticated attacks by adversaries with significant resources. Each successive level increases the rigour of the technical measures required, such as system bastioning, role-based access control, secure event logging, robust encryption, and integrity and authenticity validation.

‘This accreditation positions us at the forefront of industrial cybersecurity assessment in Europe. It provides a guarantee of trust for manufacturers, integrators and operators of critical infrastructure. It is undoubtedly a key step forward in promoting safer industrial environments, both nationally and internationally,’ said Marta Castro, Director of Digital Labs and head of TECNALIA’s Cybersecurity Assessment Laboratory.

This advance is key to promoting safer industrial environments, both nationally and internationally, and offers companies a certification pathway aligned with global market requirements and regulations such as the European Cyber Resilience Regulation (CRA).