Security Development Lifecycle Assurance

What it is

SDLA (Security Development Lifecycle Assurance) is one of ISASecure's ISA/IEC 62443 certification programs, corresponding to ISA/IEC 62443-4-1. Unlike ISASecure's product programs, SDLA certifies a development site, not a product: "Development sites which have achieved SDLA certification are listed below."

ISASecure describes itself in its own words: "ISASecure was founded in 2007 and is a wholly owned subsidiary of ISA." The ISASecure control systems certification program is managed under the ISA Security Compliance Institute (ISCI); the program's Program Manager is presented on ISASecure's own page as leading "the ISASecure control systems certification program managed under the ISA Security Compliance Institute."

ISASecure describes its accreditation model: it is "the only global ISA/IEC 62443 certification program that requires its certification bodies to be accredited to ISO/IEC 17065." Assessments are "conducted by a global network of ISO/IEC 17065 accredited ISASecure certification bodies."

Who owns it

SDLA is owned by ISASecure, a wholly owned subsidiary of the International Society of Automation (ISA); the ISASecure control systems certification program is managed under the ISA Security Compliance Institute (ISCI).

Who assesses it

ISASecure states that assessments are "conducted by a global network of ISO/IEC 17065 accredited ISASecure certification bodies." Its labs are "independently accredited by ISO/IEC 17011 Accreditation Bodies (AB) to the ISO/IEC 17065 international standard for CBs and ISO/IEC 17025 international standard for test laboratories." Accreditors named on the same page include ANAB, JAB, A2LA, ACLASS and SAC (Singapore); which specific certification bodies currently hold SDLA-scope accreditation was not verified in the sources reviewed as of 31 August 2026.