Johnson Controls announces that its VideoEdge network video recording platform from American Dynamics is the first product to be officially certified as meeting the highest level of third-party cybersecurity standards from UL (Underwriters Laboratories) for life-safety and security, UL2900-2-3.
UL’s Cybersecurity Assurance Program (UL CAP) tests network-connectable products and systems against established criteria from the UL 2900 series of cybersecurity standards. The UL CAP program also assesses a manufacturer’s processes for cybersecure product development, incident response and internal ongoing testing and evaluation of security vulnerabilities of products.
Johnson Controls says in order to receive level 3 certification, the VideoEdge NVR platform underwent a series of evaluations based on UL 2900-2-3, a standard developed specifically for the electronic physical security industry, which assesses a product’s software vulnerabilities and weaknesses and reviews its exposure to exploitation and known malware.
“The development of standardized, testable cybersecurity criteria by an organization such as UL, the preeminent security and life safety certification organization, provides a level playing field for end users and systems designers, who can now trust that a UL CAP certified product meets robust cybersecurity standards,” says William Brown, senior engineering manager, Cyber Protection Program, Building Technologies & Solutions, Johnson Controls.
“We’re extremely proud of this first UL CAP certification, as it encapsulates the ethos of our Tyco, Cyber Protection Product Security Program and our product engineering, development and support culture, which is to provide our customers with solutions designed to meet a high degree of security and reliability and provide a positive operational impact.”
The VideoEdge NVR platform was developed under the Tyco Cyber Protection Product Security Program, which combines secure product development, testing and evaluation and configuration guidelines for compliance, according to the company.
Tyco’s program begins with product design and continues once a product is in the field. Through an incident response service, its dedicated cybersecurity team quickly assesses new threats and vulnerabilities and advises customers on how they may reduce their cybersecurity exposure.
“Submitting the VideoEdge NVR platform for UL CAP assessment and certification demonstrates Johnson Controls’ commitment to supporting their customers and end users,” says Ken Modeste, director of UL’s Connected Technologies business. “The product submitted by Johnson Controls meets science-backed third party industry best practices for cybersecurity, and thus provides them a higher level of trust and confidence.”