IoT Cyber Baseline Level 2

The IASME IoT Cyber Baseline scheme certifies internet connected devices against the most important security controls and demonstrates commitment to best practice security.

The scheme aligns with UK legislation and covers the top three requirements of the ETSI EN 303 645 standard.

Level Two includes a hands-on audit of the device and provides an additional level of assurance above the verified-assessment level.


A hands-on audit of the device and supporting documentation provided by the IoT device manufacturer to verify the answers provided to the self-assessment questions.

IASME IoT Cyber Baseline

Level Two (Audited Level) Certification

The manufacturer must attain the verified-assessed  level first before applying for the audited level

Use of three standard auditing methods – interview, documentation review and hands-on device security review

The auditing is managed by an Assessor, skilled in IoT cyber security, from one of IASME’s network of Certification Bodies

Accessible to micro and small manufacturers, as well as to larger organisations

IASME IoT Cyber Baseline – Level Two (Audited) Certification – $2100£2100 + VAT€2100

The scope of the certification will include the IoT device and any associated hub, app and cloud service the device relies upon to operate.