Helping ORing earn a TÜV SÜD IEC 62443-4-2 CB certificate
CyberOT Lab worked ICSCracker into ORing's IEC 62443-4-2 certification project, running the SVV testing and producing the evidence. TÜV SÜD awarded ORing the Cyber Security CB certificate at TÜV SÜD PSB in Singapore.
Issued by TÜV SÜD
On 17 June 2026, at TÜV SÜD PSB in Singapore, TÜV SÜD awarded ORing an IEC 62443-4-2 Cyber Security CB certificate.
CyberOT Lab worked ICSCracker into the verification for that project: the SVV testing was run on ICSCracker, and the resulting evidence was accepted by TÜV SÜD as part of the basis for the certificate.
Why SVV is the bottleneck
Component certification under IEC 62443-4-2 requires SVV — Security Verification and Validation — evidence, and this is the step that stalls. Test records assembled by hand are not automatically accepted by a certification body, and a second pass costs real calendar time.
The evidence submitted here covered:
- SVV-3 vulnerability testing, with results filed under the standard’s own (a)-(e) sub-items
- SVV-4 penetration testing, preceded by a TCP/UDP sweep that establishes which services are actually reachable
- Structured reports mapped clause by clause, carrying CWE/OWASP/CERT findings with section navigation, exportable to HTML or PDF as a deliverable
What this means if you are heading into certification
The same tooling and process is available to you: run what the certification body will look at before you submit, rather than finding out what is missing when the submission comes back. ICSCracker can be licensed and operated in-house, or CyberOT Lab can work the certification project with you.
About ORing
ORing Industrial Networking is an industrial networking equipment manufacturer and a CyberOT Lab partner — the OPS (ORing Portable Shield) portable security device is their product.