Yokogawa Receives ISAE3402/SSAE16 Internal Controls Report (Type 1)

1st December 2015

Company Announcement - Yokogawa announces that it has received a Type 1 report* on the internal controls that it employs in the provision of production control system secured remote solution services at its customers’ plants. This report complies with the ISAE3402 international standard and the SSAE16 U.S. standard, both of which address the adequacy and effectiveness of the internal controls at service organisations.With the growing threat of cyber-attacks, there is an urgent need to strengthen the security of plant production control systems. In addition to control systems, Yokogawa provides comprehensive solution services that address its customers’ security needs. Yokogawa designs, constructs, and manages various control system security solutions that make use of information systems infrastructure. To help it improve the reliability and value of these services, and thereby ensure the stable operation of its systems, Yokogawa has obtained an ISAE3402/SSAE16 internal controls report on the service delivery and service support processes supporting the secured remote solution services that it offers in markets outside Japan.

Based on an objective evaluation, this report attests to the adequacy and effectiveness of Yokogawa’s internal controls for its secured remote solution services providing customers the assurance they need to commission these services without conducting their own audits. In addition, customers can submit such reports for evaluations of service organisation internal controls that are required under regulations such as the U.S. Sarbanes-Oxley Act (SOX), thus reducing their auditing workload.

As a result of the rising use of information technology and advances that are being achieved through the introduction of Industrial Internet of Things (IIoT) technology in plant operations, it is expected that operation technology (OT) and information technology (IT) will become more closely integrated. With its solid track record in helping companies make optimum use of their control systems, Yokogawa is well positioned to provide services that incorporate cyber-security management and other types of information technology solutions in control systems. Yokogawa will use such evaluations from independent organisations to provide its customers with optimum, highly reliable services