Interact awarded DEKRA cybersecurity assurance

Bridgewater, New Jersey – Signify (Euronext: LIGHT) today announced that its Interact cloud-based wireless lighting system has been awarded the DEKRA IEC 62443-3-3 security certification. This certification is a mark of confidence that the Interact system and services are private and secure against ever-evolving information security threats. This certification confirms the resilience of the Interact system and is the latest step in Signify’s ongoing cybersecurity assurance efforts.

Signify was among the first lighting companies to certify its development lifecycle process against IEC 62443-4-1, the international standard for security of industrial control systems and operational technology. Signify’s cloud solutions are also certified against ISO 27001, a reputed international standard for information security.

The Interact connected lighting system combines energy-efficient LED luminaires, sensors and wireless networking, and cloud-based software. It is designed to help businesses centrally manage and control their lighting as well as gather data from their illuminated spaces to maximize energy savings, enhance the wellbeing of employees, improve their operational efficiency, and gain other actionable insights.

IEC-62443-3-3 focuses on the principle of a secure Industrial Automated Control Systems (IACS) and other parts of the standard series. Certification is awarded based on tests against the following pillars:

• Access control – only authorized users can access the system
• Use control – only authorized actions can be performed in the system
• System integrity – the system and its data are protected from unauthorized changes
• Data confidentiality – sensitive data is safeguarded from unauthorized access and disclosure
• Restricted data flow – data can only flow between controlled system components, preventing unauthorized access or information leaks
• Timely response to events – detects and responds to a cybersecurity threat
• Resource availability – ensures that system resources remain available and functional during a cybersecurity incident