SZ Lin (林上智)
ISA Taiwan Section / President
SZ Lin has over 15 years of experience in cybersecurity and industrial control systems (ICS/OT). He is the President of ISA Taiwan Section and an ISA/IEC 62443 certified instructor. Lin plays a key role in the development and implementation of ISA/IEC 62443 and SEMI E187, focusing on ICS security standard adoption, testing, risk assessment, and cybersecurity consulting. His expertise spans ICS/OT security, Industrial IoT (IIoT), and Secure Software Development Lifecycle (SSDLC).
He actively contributes to ISASecure cybersecurity certification, helping establish it as a global security assessment program for industrial systems. Lin also serves as a BSMI Technical Committee Member, iPAS ICS Cybersecurity Committee Member, ISA99 Standards Committee Member, co-chair of the ISA/IEC 62443-3-1 working group, and SEMI SMCC Semiconductor Cybersecurity Committee Member, promoting ICS security standards across industries.
He holds CISSP, ISSAP, CSSLP, CISM, CISA, GICSP (Gold), and ISA/IEC 62443 Cybersecurity Expert certifications and has spoken at major cybersecurity conferences, including the Cybersec Taiwan, ISA OT Cybersecurity Summit, and ICS Cyber Security Conference (APAC & USA).
As industrial control systems (ICS) and critical infrastructure rapidly undergo digital transformation, cybersecurity risks are escalating. For asset owners, effectively mitigating site-specific cybersecurity risks has become a critical challenge. This session will introduce the ISASecure ACSSA (Automation Control System Security Assurance) international certification program and explore how it integrates with ISA/IEC 62443 standards to provide a comprehensive security assessment and validation solution for industrial environments, helping asset owners identify and reduce cybersecurity risks across their operational sites.
The speaker has been actively involved in the design and implementation strategy of ISASecure ACSSA, which aligns with key ISA/IEC 62443 standards, including 62443-2-1, 62443-2-4, 62443-3-2, and 62443-3-3. These standards collectively enable tailored security measures for industries such as oil & gas, power grids, water utilities, and building automation, ensuring sector-specific cybersecurity protection.
This session will provide an in-depth analysis of the ISASecure ACSSA program, guiding enterprises and asset owners in conducting comprehensive cybersecurity risk assessments and enhancing their security resilience based on industry-specific needs. By adopting these methodologies, organizations can effectively address evolving cybersecurity threats, ensuring the security and stable operation of critical infrastructure.
As global cybersecurity regulations and standards rapidly evolve, the Secure Software Development Lifecycle (SSDLC) has become a fundamental framework for addressing security challenges and ensuring product compliance. This session, led by an expert involved in SSDLC international standard development, will provide an in-depth exploration of the latest trends and future directions of SSDLC standards. Key topics include enhancing security by design, strengthening supply chain risk management, and advancing the adoption of Software Bill of Materials (SBOM).
The speaker will analyze the revision trajectory of SSDLC international standards and explain how global regulations are driving SSDLC to become a core strategy in product design and development. Through real-world case studies and emerging trends, this session will illustrate how SSDLC helps organizations navigate increasingly complex cybersecurity challenges, achieve compliance with regulatory requirements, and enhance overall product security.
By examining SSDLC from a multi-faceted, international perspective, this session will uncover its critical role and value in the next-generation security standards landscape. Attendees will gain a deeper understanding of SSDLC’s impact on strengthening security efficiency and regulatory compliance in the product development process, ultimately equipping organizations with the resilience and competitive edge to face future challenges.
CYBERSEC 2025 uses cookies to provide you with the best user experience possible. By continuing to use this site, you agree to the terms in our Privacy Policy 。