The IASME IoT Cyber Assurance scheme certifies internet connected devices against the most important security controls and demonstrates commitment to best practice security.
The scheme aligns with all 13 provisions of the worldwide standard in IoT cyber security, ETSI EN 303 645 and with the UK IoT security legislation and guidance. It is also mapped to the IoTSF Security Compliance Framework.
Level Two includes a hands-on audit of the device and provides an additional level of assurance above the verified-assessment level.
IASME IoT Cyber Assurance
Level Two Certification
The manufacturer must attain the level 1 certification before applying for the audited level
The assessment includes the use of three auditing methods – interview, documentation review and a hands-on device security review
The audit is managed by an Assessor, skilled in IoT cyber security, from one of IASME’s network of Certification Bodies
Accessible to micro and small manufacturers, as well as to larger organisations
The scope of the certification will include the IoT device and any associated hub, app and cloud service the device relies upon to operate.
Certification guards against the exploitation of common IoT cyber security vulnerabilities such as weak passwords, legacy software and insecure communications.