The IASME IoT Cyber Baseline scheme certifies internet connected devices against the most important security controls and demonstrates commitment to best practice security.
The scheme aligns with UK legislation and covers the top three requirements of the ETSI EN 303 645 standard.
Level Two includes a hands-on audit of the device and provides an additional level of assurance above the verified-assessment level.
CERTIFICATION
A hands-on audit of the device and supporting documentation provided by the IoT device manufacturer to verify the answers provided to the self-assessment questions.
IASME IoT Cyber Baseline
Level Two (Audited Level) Certification
The manufacturer must attain the verified-assessed level first before applying for the audited level
Use of three standard auditing methods – interview, documentation review and hands-on device security review
The auditing is managed by an Assessor, skilled in IoT cyber security, from one of IASME’s network of Certification Bodies
Accessible to micro and small manufacturers, as well as to larger organisations
IASME IoT Cyber Baseline – Level Two (Audited) Certification – £2,000+VAT
The scope of the certification will include the IoT device and any associated hub, app and cloud service the device relies upon to operate.