The International Society of Automation (ISA) announced Sept. 22 that DeNexus has officially joined the ISA Global Cybersecurity Alliance, demonstrating its commitment to advancing operational (OT) cybersecurity via ISA/IEC 62443 standards.

DeNexus supplies an evidence-based solution for OT industrial stakeholders to gain visibility into each facility’s cyber-exposure, calculate the probability and financial impact of potential cyber-incidents, and prioritize risk mitigation based on ROI or other KPIs. By joining ISAGCA, DeNexus underscores its commitment to supporting standards-driven security practices across the OT lifecycle from system design and integration to operations and maintenance. By joining ISAGCA, DeNexus will collaborate with global industry leaders to accelerate awareness, adoption and implementation of the ISA/IEC 62443 standards framework.

“This is a significant moment for the ISAGCA community,” says Michelle Ritterskamp, ISAGCA program coordinator. “DeNexus brings a deep OT technical experience and a desire to incorporate ISA/IEC 62443 into their business. ISAGCA staff would like to thank DeNexus for the excellent collaboration on programs it’s already accomplished, and we look forward to further sharing DeNexus’ expertise in future initiatives.”

Jose Seara, founder and CEO at DeNexus, adds, “Industrial cyber-risk has been invisible to people who carry it. Including boards, CFOs and markets that could underwrite it. That's the problem I started DeNexus to solve, and it's the same problem ISA/IEC 62443 addresses from the standards side. A common standard for how OT security is designed and assessed is what makes risk assessable in the first place. And once risk can be assessed, it can be quantified, mitigated and transferred. That's the chain: ISA/IEC 62443 gives the industry a shared language for control, and our platform turns that control state into a financial number a board can govern by and an underwriter can price against. Joining ISAGCA puts us alongside the organizations building that foundation. Our mission is to make industrial cyber-risk quantifiable for boards, investors and the risk transfer market, and these standards are what make that possible at scale."