Skip to main content

Tattile gains double cybersecurity certification

IEC-62443 and ISO-27001 cover software and infrastructure IT security
By Adam Hill January 25, 2024 Read time: 2 mins
Tattile: certified

Tattile has achieved two key cybersecurity certifications for its products: IEC-62443 (focused on software security) and ISO-27001 (infrastructure IT security).

The Italian company, which specialises in cameras for ITS applications, warns that security bugs are growing, and cites research from Cybersecurity Ventures that the global annual cost of cybercrime is estimated to exceed $20 trillion by 2026.

ANPR cameras are not exempt from cyberattacks for several reasons, the manufacturer says: "Being placed in public areas, they could be approached by ill-intentioned people. Working inside the interconnection of networks, cameras can be part of larger systems and interconnected with other devices and systems."

Cameras may be vulnerable to unknown threats if they don't receive regular updates from the manufacturer or users due to software and firmware vulnerabilities, Tattile adds.

The company developed its Stark software platform from scratch, using the DevSecOps methodology and says it planned from the start to achieve the double cybersecurity certification.

IEC-62443 been established by several global testing, inspection and certification bodies, defining elements such as test methods, surveillance audit policies and public documentation policies. 

Tattile says the DevSecOps methodology reduces risk via dedicated tools that continuously analyse all the code bases, and ensures products are secure by design.

Also, as new cyberattacks continue to emerge, security patches and related software updates need to be applied to the system: Stark by Tattile provides "at least 12 annual updates", the company says.

Meanwhile, ISO/IEC-27001:2013 (ISO-27001) ensures that the processing of information (including data provided by customers) is compliant with international standards such as GDPR.

For more information on companies in this article

Related Content

  • EV charging will require increased investment in cyber security systems
    April 18, 2012
    The technology architecture associated with electric vehicle (EV) charging is continuing to evolve as utilities and other key players in the industry ecosystem identify business requirements and risks associated with adding significant new demands on the electrical grid. One of the most pressing challenges is related to securing financial transactions and end-to-end communications throughout the EV charging infrastructure, and a recent report from Pike Research indicates that these areas will be the focus o
  • ‘Just 6%’ of transport companies can tackle cyberattacks, says Irdeto
    June 21, 2019
    Transport companies are under concerted attack from hackers, according to security specialist Irdeto – and most don’t know how to respond. New research from the group says that 77% of organisations in transport and automotive have experienced an Internet of Things (IoT)-focused cyberattack in the past year – but only 6% “have what they need to combat cyberattacks”. The survey of 225 companies in China, Germany, Japan, UK and US found that the incursions had an impact on 91% of those which experience
  • Control room tech ends data overload
    July 22, 2021
    There have never been so many data sources available to traffic control centre operators – but too much data can be as bad as too little when making decisions. Adam Hill asks how control room technology companies can help operators screen out the white noise
  • Gridsmart tackling infrastructure security threat
    June 7, 2018
    A new division, formed by Gridsmart Technologies only three weeks ago, is making its public debut here at ITS America Detroit. Gridsmart Information Security & Threat Intelligence (ISTI) is an industry first-of-its-kind transportation cybersecurity group dedicated to providing vulnerability/threat assessments and tailored security strategies. It will work with private companies, departments of transportation, and others to proactively defend and enhance the resiliency of their technical infrastructure