Moxa Secures Dual IEC 62443-4-1 Maturity Level 3 Certifications, Setting a New Benchmark for Critical Infrastructure Security

Moxa has achieved a significant industry milestone by securing dual IEC 62443-4-1 Maturity Level 3 (ML3) certifications. Recognized by both the IECEE Certification Body Scheme and ISA Security Compliance Institute (ISCI/ISASecure), the dual certification validates Moxa’s rigorous Secure Development Life Cycle (SDL) and reinforces its position as a trusted provider of secure infrastructure solutions for critical industries.

Dual Certification Confirms Secure Development Excellence

IEC 62443-4-1 ML3 represents an advanced maturity level within the IEC 62443 framework and demonstrates that an organization has fully embedded secure development practices throughout its operations. Achieving ML3 confirms that Moxa has implemented a standardized Secure Development Life Cycle (SDL) across the company and continuously applies, reviews, and improves these processes. The dual certification by both IECEE and ISASecure independently validates these practices.

The certification scope includes comprehensive SDL governance, mandatory threat modeling and risk traceability, formalized Product Security Incident Response Team (PSIRT) operations, ongoing vulnerability and patch management, and integrated supply-chain security. The ISASecure Secure Development Lifecycle Assurance (SDLA) certification further confirms that these processes are not only documented but also independently audited and consistently applied in practice.

Building Confidence Across the Supply Chain

Achieving dual IEC 62443-4-1 ML3 certification demonstrates strong engineering discipline and auditable cybersecurity capabilities across the product life cycle. It also strengthens confidence among customers, integrators, operators, and infrastructure owners that security practices are deeply embedded into product development and maintenance processes.

“Achieving IEC 62443-4-1 ML3, regarded as the baseline for critical infrastructure, is a significant accomplishment that requires a deep, thorough, and organization-wide commitment to cybersecurity,” said Andy Tsai, Regional Senior Director of UL Solutions Taiwan. “We’re honored to have conducted evaluations that enabled Moxa to obtain IEC 62443-4-1 ML3 certification from both IECEE and ISASecure, demonstrating Moxa’s rigorous secure-by-design approach and life-cycle product security management.”

UL Solutions is a globally recognized safety science organization and accredited Certification Body (CB) responsible for evaluating, testing, and certifying products against international standards.

Supporting Cyber Resilience Act (CRA) Readiness

As cybersecurity regulations continue to evolve, organizations must demonstrate that security is integrated into products from the earliest development stages and maintained throughout the entire product life cycle. Regulations such as the EU Cyber Resilience Act (CRA) are setting higher expectations for vulnerability management, patch delivery, post-market security maintenance, and overall cybersecurity governance.

Moxa’s standards-based secure development approach helps customers address these requirements more efficiently. The company’s commitment to the IEC 62443 framework dates back to 2016, reflecting a proactive approach to cybersecurity and compliance rather than a reactive response to regulatory change.

Advancing the Future of OT Cybersecurity

According to John Chang, Director of R&D Management and Product Security Center at Moxa, achieving dual IEC 62443-4-1 ML3 certification reflects the company’s long-term commitment to evidence-based security practices and continuous improvement.

“The remarkable milestone also proves our strategic commitment to shaping the future of operational technology (OT) cybersecurity from the ground up, ensuring our products are secure by design to become the secure foundation of the world’s most critical infrastructure,” Chang said.

Today, Moxa is recognized not only as a provider of industrial networking and communication solutions but also as a trusted secure infrastructure partner capable of helping organizations bridge IT and OT cybersecurity requirements throughout long infrastructure life cycles.