• ISA99/IEC 62443 Cybersecurity Certificate Programs
    Frequently Asked Questions

    Program Definition

    Why did ISA develop the ISA99/IEC 62443 Cybersecurity Certificate Programs? 
    ISA has developed this program to increase knowledge and awareness of the ISA99/IEC 62442 standards. The first certificate in the program is the ISA99/IEC 62443 Cybersecurity Fundamentals Specialist.

    The new ISA99/IEC 62443 Cybersecurity Fundamentals Specialist certificate program is designed for professionals involved in IT and control system security roles that need to develop a command of industrial cybersecurity terminology and understanding of the material embedded in the ISA99/IEC 62443 standards.

    Who can say they hold a certificate? 
    The ISA99/IEC 62443 Cybersecurity certificates are awarded to those who successfully complete a designated training course and pass a 75-question multiple choice exam.

    How does the ISA99 Cybersecurity Certificate Program compare to other safety programs?
    Review the comparison chart here.

    top -

    Training Course Requirements

    Why are courses required for the ISA99/IEC 62443 certificate program exam candidates? 
    Certificate programs are typically associated with mastery of specific course content and may or may not require work experience. The ISA99/IEC 62443 certificate program was developed by ISA working with industry experts. The program(s) increase knowledge and awareness of the ISA99/IEC 62443 standard through the course material and examination.

    What training courses can I take to qualify to take the ISA99/IEC 62443 Cybersecurity Fundamentals certificate exam?
    ISA's two-day classroom course, Using the ANSI/ISA99 (IEC 62443) Standards to Secure Your Industrial Control System (IC32), must be sucessfully completed in order to be eligible to take the ISA99/IEC 62443 Cybersecurity Fundamentals certificate exam. Or, ISA's multi-week, online course: Cyber Security for Automation, Control and SCADA Systems (IC32E) is also an eligible option to complete and sit for the exam.

    What if I already took the IC32 or IC32E courses?
    If you took either course LESS THAN one year from the date you wish to take the exam, you do not have to retake the course and can register for the certificate exam. If you took either course MORE THAN one year from the date you wish to take the exam, you must retake the course in order to be eligible to sit for the certificate exam.

    Will course participants receive CEUs for the courses taken? 

    Yes. The number of CEUs is determined by the number of instructional hours, and awarded upon successful completion of the course. Completing course post-tests and receiving CEUs for course completion are not connected to passing scores on one of the certificate exams.

    What if a course is rescheduled by a candidate or ISA? 
    A candidate is not eligible to sit for the exam until he or she successfully completes the prerequisite course.Click here  for information regarding course cancellations/rescheduling. For a list of additional IC32 course offerings, click here.

    top -

    Documentation

    What paperwork must be completed to take one of the exams?
    No application is required for the ISA99/IEC 62443 Cybersecurity Fundamentals Specialist certificate exam.

    What are the pre-requisites for the certificate program? 
    There are no required prerequisites for this program; however, it is highly recommended that applicants have:
    • Three to five years of experience in the IT cybersecurity field with some experience in an industrial setting-with at least two years specifically in a process control engineering setting
    • Some level of knowledge or exposure to the ISA99/IEC 62443 standards

    top -

    Fees

    What are the fees for the certificate program? 
    Fees for required courses can be found on the course registration page. The exam fee for an ISA99/IEC 62443 certificate exam is $185. There are no group discounts for certificate exam fees. This fee includes one electronic exam.

    Can an exam be rescheduled without incurring fees? 
    Applicants may reschedule an exam appointment during the six (6) month eligibility period by contacting Prometric at least 2 days (48 hours) prior to the scheduled exam time for Prometric locations in the United States/Canada and at least 5 days (120 hours) prior to the scheduled exam time for all other Prometric locations. No reschedule fee will apply.

    Prometric Location

    Advance Notice Required to Reschedule with no fee

    United States/Canada

    At least 2 days (48 Hours) Prior to Scheduled Exam Date

    All other locations

    At least 5 Days (120 hours) Prior to Scheduled Exam Date

    What are the reschedule fees? 
    Candidates who do not appear for their scheduled exam appointment and do not give proper advance notice of intent to reschedule their exam will incur a fee of $150.

    Can a candidate retest and what is the retest fee?
    Applicants may retest once within the six (6) month eligibility period for a fee of $150. If you are outside the six (6) month eligibility period, you must register again for the required course and exam and re-take both.

    What if a candidate cannot make the scheduled appointment or is late for the appointment?
    For candidates who fail to appear for a scheduled exam, or arrive more than 15 minutes after the scheduled start time, the $150 reschedule fee will apply. The exam must be rescheduled within the candidate's six (6) month eligibility period.

    What forms of payment does ISA accept for the certificate program fees?
    ISA will accept check, certified check, money order, or wire transfer (in U.S. Dollars), credit card and purchase orders. Make checks payable to ISA. For wire transfer account information, please contact ISA Customer Service at info@isa.org or +1 919-549-8411. ISA accepts AMEX, Discover Card, Master Card, and VISA credit cards.

    Payment should be received with the course registration.

    Is the certificate program exam fee refundable? 
    ISA99/IEC 62443 certificate program fees are refundable, less a $50 processing fee, if you decide not to take the exam after completing the course and within the six-month eligibility window.

    top -

    Testing

    The ISA99/IEC 62443 Cybersecurity Fundamentals Specialist Certificate Program exam will be offered electronically through the Prometric global network of testing centers in early 2014. For testing center locations, visit the Take the Exam link to the left or visit www.prometric.com/isa. The exams are not offered the day after completing the required course.

    How does one become eligible to take an ISA99/IEC 62443 certificate exam? 
    Certificate program applicants must register for the required course and the exam, and successfully complete the required course. Click here to review the certificate program requirements.

    When will applicants find out if they are eligible to take an ISA99/IEC 62443 certificate program exam? 
    Within 5 business days of completion of the required course, an eligibility email that contains the information needed to schedule a paper/pencil exam (or a computer-based exam at Prometric, when available) will be sent to the exam candidate.

    How long is an applicant eligible to take an ISA99/IEC 62443 certificate program exam? 
    The certificate exam and any retests must be taken within six (6) months of the last day of the certificate program course.

    What if the required course is not completed? 
    If the applicant is still interested in pursuing the certificate, he/she must register for the course and exam again and re-take the course. Once the course is successfully completed, the candidate is eligible to sit for the exam.

    What is a passing score for an ISA99/IEC 62443 certificate program exam? 
    A candidate must answer at least 70% of the exam questions correctly to pass the certificate program exam.

    What if a candidate does not pass the certificate exam? 
    If a candidate fails the exam, he/she may retest one time within the initial six (6) month eligibility window for a fee of $150. If an applicant does not pass the exam within the six (6) month window after the course and would like to receive the certificate, the applicant must register for the course and exam again and re-take both.

    When can an applicant take the ISA99/IEC 62443 certificate program computer-based exam? 
    The ISA99/IEC 62443 certificate program exams are currently not available electronically through Prometric. Once they are made available in early 2014, the computer-based exams can be scheduled throughout the year. Appointment availability is developed by Prometric for each testing center, with some centers offering evening and Saturday appointments.

    An ISA99/IEC 62443 certificate program exam must be taken within six (6) months of the last day of the certificate program required course. If a candidate fails the exam, he/she may retest one (1) time within the six (6) month eligibility period. If a candidate does not pass the exam within the six (6) month window after the course and would like to receive the certificate, the applicant must register for the course and exam again and re-take both.

    Once eligible, how is an exam scheduled? 
    Once you have successully completed the course, you can choose to schedule a paper/pencil exam for the ISA99/IEC 62443 Cybersecurity Fundamentals Specialist certificate program by contacting ISA customer service at +1 919-549-8411. 

    Once the computer-based exam is available, applicants who sucessfully complete the program requirements will receive an email with an eligibility code to use to schedule their exam through Prometric. In this case, you would go to www.prometric.com/isa to review locations and schedule an appointment.

    Once scheduled, how is an exam confirmed? 
    Exam appointments are confirmed by Prometric via email. ISA does not provide candidate email addresses to Prometric-the candidate provides the email address they wish to receive the exam confirmation.

    What if an exam confirmation is not received from Prometric? 
    Contact Prometric Candidate Care at 800-853-6769 and ask that it be emailed to you again. ISA cannot provide the confirmation for you.

    Who should be contacted to reschedule an exam appointment? 
    Candidates must contact ISA if an exam appointment needs to be rescheduled. If the appointment is not cancelled at least 2 days in advance at Prometric locations in the United States/Canada or at least 5 days in advance at other Prometric locations, a reschedule form must be completed and sent to ISA with payment before the candidate eligibility can be re-set.

    top -

    Examination Process

    Once a candidate is eligible, how much time is available for testing?
    The eligibility period to take a certificate exam is six (6) months from the date the course is completed. You must complete all testing within the six (6) month eligibility period, including any reschedules or retests. Candidates have two hours to complete the exam.

    Are there testing windows for taking certificate exams? 
    There are no testing windows for taking any of the certificate exams. Testing center availability is set by each Prometric testing center in the Prometric network. Some Prometric testing centers offer evening and Saturday appointments. Paper/Pencil exams can be schedule through ISA customer service: +1 919-549-8411.

    When should a candidate arrive at the testing center? 
    Candidates should arrive at the testing center no later than 30 minutes prior to the scheduled exam time to sign-in and receive instruction. All examinations are given in a two hour time period.

    What if the testing center cannot accommodate an exam appointment? 
    If technical difficulties or inclement weather cause the cancellation of an appointment or the closure of a Prometric testing center, Prometric will attempt to contact the candidate using the phone numbers provided to them by ISA. Last minute cancellation situations will be handled on a case-by-case basis, and ISA and Prometric will work together to reschedule the candidate as quickly as possible.

    What should be brought to the testing center? 
    The Confirmation Letter from Prometric and a valid government issued photo ID with signature.

    Are there any materials that are not allowed at the testing center?
    All exams are closed book. No reference material will be allowed in the testing center. A location for personal items such as a pocket book, palmtop, mobile phone, or pager will be made available to you. Please note that storage space will be limited.

    Will anything be provided to candidates at the testing center? 
    A whiteboard with marker will be provided when candidates check-in at the testing center, and a scientific calculator will be available as a hot button on the computer screen.

    When are candidates notified of their certificate status?
    Results are reported immediately at the testing center. If a candidate passes, a certificate will be mailed within thirty (30) days of the exam date. Failing candidates receive a diagnostic report of how they performed on the exam at the testing center. Please contact ISA customer service for information regarding paper/pencil exam results reporting at +1 919-549-8411.

    What if the testing center does not provide the testing results? 
    If the testing center is unable to provide testing results, have the test center administrator complete a candidate incident report and then let ISA know by calling Customer Service at +1 919-549-8411.

    top -

    Renewal

    Because the ISA99/IEC 62443 Cybersecurity Certificate Programs are certificates and not certifications, you are not required to renew your ISA99/IEC 62443 certificate(s); however, once obtained your certificate(s) will only be considered current for three (3) years. After your three-year expiration date, your certificate's status will no longer be considered active and you will not be able to claim that you hold a current/active ISA99/IEC 62443 certificate. Click here  to learn more about extending the current status of your certificate(s).

    top -

    Displaying Your ISA99/IEC 62443 Certificate Program Credentials

    How do I get a copy of my ISA99/IEC 62443 certificate in case I lose it or if my supervisor wants one? 
    To receive a duplicate copy of your certificate, send a written request to ISA with your mailing address and payment of $15 for a duplicate certificate. Once your payment is received, a certificate will be mailed to you.

    How should I display my ISA99/IEC 62443 certificate designation(s) on business cards, in signature blocks, etc.?

    ISA recommends the following for displaying or noting your credentials:                                                                               

    • If you have achieved ISA99/IEC 62443 Certificate 1: ISA99/IEC 62443 Cybersecurity Fundamentals Specialist.

    Because these are certificate programs and not certification programs, you should not list your ISA99/IEC 62443 certificate designations directly after your name. On your business card (signature block, resume, etc.), you should display/include your ISA99/IEC 62443 certificate designation in an area distinctly separate from your name and certificate/licensure/degree designations (e.g. CAP, PE, MBA, etc.). When possible, include "Certificate" or "Certificate Holder" after your ISA99/IEC 62443 designation listing (e.g. ISA99/IEC 62443 Cybersecurity Fundamentals Specialist Specialist Certificate Holder).