The IoT Security Assured scheme certifies internet connected devices against the most important security controls and demonstrates commitment to best practice security.
IoT Security CERTIFICATION will
Reassure your customers that their device has the most important security controls in place.
IASME has developed the IoT Security Assured scheme to provide an essential opportunity for manufacturers to improve the security of their internet-connected devices.
IASME has developed the IoT Security Assured scheme to provide an essential opportunity for manufacturers to improve the security of their internet-connected devices and to show they are compliant with best-practice security. The scheme has been designed specifically to be accessible to smaller organisations, micro-businesses and start-ups alongside more established manufacturers.
The scheme is also a vital tool in enabling organisations to verify the security of connected devices in their own supply chain.
The IoT Security Assured scheme is aligned with the ETSI technical standard for IoT security, EN 303 645, and with the proposed UK IoT security legislation and guidance. It is also mapped to the IoTSF Security Compliance Framework.
(Please click the image below to enlarge).
Within the IoT Security Assured scheme, there are three levels of security that a device can be certified to as follows:
The Basic is aligned with proposed UK legislation and covers the top three requirements of the ETSI standard.
The Silver level is aligned with the ETSI mandatory requirements and Data Protection provisions.
The Gold level is aligned with the ETSI mandatory requirements as well as all the additional ETSI recommended requirements and Data Protection provisions.
The cost of the assessment is £500 + VAT (£450 + VAT for micro-businesses).
The IoT Security Assured certification process requires manufacturers to answer a set of simple questions, using IASME’s online portal, about the security controls in place on a connected device and any associated services. A board member or equivalent must sign a declaration to confirm that all the answers are accurate. The answers to this assessment are then reviewed by one of IASME’s IoT trained assessors.
If the manufacturer is successful, a certificate and a badge is provided to be placed on product marketing and packaging to demonstrate the security of the device to purchasers.