The Government's Code of Practice (CoP) for the Internet of Things, developed by The Department for Science, Innovation & Technology (DSIT), sets a benchmark for security for manufacturers to follow when developing IoT products for the UK market. This is now being influenced by ETSI EN 303 645 and other IoT related standards.
The Government subsequently introduced legislation, the Product Security and Telecommunications Infrastructure Act 2022 (PSTI), which:
- Requires consumer connectable products to be more secure against cyber attacks, protecting individual privacy and security
- Requires manufacturers, importers and distributors to comply with new security requirements relating to consumer connectable products
- Creates an enforcement regime with civil and criminal sanctions aimed at preventing insecure products being made available on the UK market
With the increase in available IoT products and a growing ecosystem of interconnected devices, cyber criminals are targeting and exploiting vulnerabilities of the products and within apps.
This, coupled with growing demand from industry and current SBD members seeking to gain SBD accreditation for IoT connected products, led SBD to launch the 'Secure Connected Device' accreditation scheme to help manufacturers develop safe IoT products that consumers can use with confidence. Our aim is simply to prevent crime, which includes criminal activity in the cyber world.
We want to help companies get their IoT products appropriately assessed and certified against all 13 provisions of the ETSI standard, a requirement that goes beyond the Government's legislation, so that companies can not only demonstrate that they have achieved the appropriate certification, but importantly protects our member companies, their customers and the public.
We have developed the Secure Connected Device scheme in consultation with DSIT. This demonstrates that their products have achieved the appropriate and relevant IoT standards and certification from an SBD recognised certification body, thus meeting SBD requirements and providing customers with cyber security assurance.
DSIT supports industry schemes which help consumers make better informed choices when buying connectable devices.
We have developed the Secure Connected Device scheme in consultation with DSIT. This demonstrates that their products have achieved the appropriate and relevant IoT standards and certification from an SBD recognised certification body, thus meeting SBD requirements and providing customers with cyber security assurance.
