Product Security 1.1: The Next Level of IoT Trust

In response to the escalating scale and complexity of attacks on IoT systems, the Connectivity Standards Alliance (Alliance) has released version 1.1 of its Product Security Certification Program, which bridges the gap between disparate international cybersecurity standards. By streamlining the certification process and reducing evidence duplication, this program helps manufacturers navigate the challenge of diverging global requirements more easily, ensuring consumers and regulators have a reliable baseline for IoT security.

The Product Security 1.1 update represents a significant expansion of the program’s capabilities and reach. Moving beyond the device-centric focus of the initial version, the new release encompasses complete IoT Systems, which may include IoT Devices, IoT Apps, IoT Remote Processes, and IoT Gateways. To meet the needs of more critical systems and provide greater confidence in security results, this latest version introduces two levels of security assurance. Level-1 involves a supplier self-assessment reviewed by an Authorised Test Laboratory (ATL), while the new Level-2 requires an independent assessment and functional testing conducted by an ATL.

“With this announcement, the Product Security Certification Program advances our goal to make compliance with external product security standards and regulations practical for the global IoT industry,” said Steve Hanna of Infineon, the Chair of the Product Security Working Group Steering Committee. “Version 1.1 expands the scope of the program and introduces higher-confidence pathways for certification, reflecting emerging trends in global regulations.”

The Product Security Certification Program simplifies compliance across global markets, directly addressing the overhead and complexity manufacturers face when certifying products across different regions. Specifically, version 1.1 now covers the cybersecurity requirements for the European Union Radio Equipment Directive (RED) harmonised standards and the Singapore Cyber Security Labelling Scheme.
For More Information: https://csa-iot.org

Advertisement[adrotate banner="30"]