Johnson Controls announced that its VideoEdge network video recording platform from American Dynamics is the first product to be officially certified as meeting the highest level of third-party cyber security standards from UL (Underwriters Laboratories) for Life Safety and Security, UL2900-2-3.  

UL’s Cybersecurity Assurance Program (UL CAP) tests network-connectable products and systems against established criteria from the UL 2900 series of cybersecurity standards. The UL CAP program also assesses a manufacturer’s processes for cyber secure product development, incident response and internal ongoing testing and evaluation of security vulnerabilities of products. To garner the Level 3 certification, the highest UL CAP designation, the VideoEdge NVR platform underwent a series of evaluations based on UL 2900-2-3, a standard developed specifically for the electronic physical security industry, which assesses a product’s software vulnerabilities and weaknesses and reviews its exposure to exploitation and known malware. 

“The development of standardized, testable cyber security criteria by an organization such as UL, the preeminent security and life safety certification organization, provides a level playing field for end users and systems designers, who can now trust that a UL CAP certified product meets robust cybersecurity standards,” said William Brown, senior engineering manager, Cyber Protection Program, Building Technologies & Solutions, Johnson Controls. “We’re extremely proud of this first UL CAP certification, as it encapsulates the ethos of our Tyco, Cyber Protection Product Security Program and our product engineering, development and support culture, which is to provide our customers with solutions designed to meet a high degree of security and reliability and provide a positive operational impact.”

Ken Modeste, director of UL’s Connected Technologies business, added, “Submitting the VideoEdge NVR platform for UL CAP assessment and certification demonstrates Johnson Controls’ commitment to supporting their customers and end users. The product submitted by Johnson Controls meets science-backed third party industry best practices for cybersecurity, and thus provides them a higher level of trust and confidence.” 

The VideoEdge NVR platform was developed under the Tyco, Cyber Protection Product Security Program, which combines secure product development, testing and evaluation, and configuration guidelines for compliance. The Cyber Protection Product Security Program approach begins with product design and continues once a product is in the field, a recognition that a product considered secure today may not be secure tomorrow. Through the rapid incident response service, the dedicated cyber security team quickly assesses new threats and vulnerabilities and advises customers on how they may reduce their cyber security exposure, the company described.

Visit americandynamics.net for more information.