The UK has just passed the Product Security and Telecommunications Infrastructure Act 2022, which will help ensure that all intelligent consumer products have good security to protect against cyber attacks.

An innovative product is a device connected to the internet or another network and often has an app and a wireless connection. Smart devices are also part of the Internet of Things or IoT. The new law applies to all consumer IoT products, which include:

• connected appliances, such as washing machines and fridges
• connected safety-relevant products such as smoke detectors and door locks
• connected home automation and alarm systems
• connected children’s toys and baby monitors
• Internet of Things base stations and hubs to which multiple devices connect
• wearable connected fitness trackers
• outdoor leisure products, such as handheld connected GPS devices that are not wearables
• smart home assistants
• smartphones
• connected cameras
• TVs and speakers

Without basic security, everyday connected devices can provide a way for criminals on the internet to steal personal data, access microphones and cameras or hijack a device for ulterior motives.

In response to a growing need for manufacturers and retailers to demonstrate sound security practices associated with IoT devices, IASME operates a well-regarded certification scheme which supports manufacturers in improving their devices’ security and certifying their achievement.

The Department of Digital, Culture, Media and Sport funding initially supported the scheme. It showcased several innovative UK-based manufacturers that were able to certify their internet-connected devices against the most critical security controls in line with the ETSI EN 303 645 standards.

The IoT Cyber Assured scheme fulfils the cyber security requirements for Secure By Design. Secured by Design (SBD) operates an accreditation scheme on behalf of the UK Police Service to show that products or services have met recognised security standards. Secure by Design recently launched the Secure Connected Device accreditation for manufacturers of innovative connected security products such as alarm systems and video products. They have picked the IASME scheme as one of the ways for manufacturers to confirm that their products have the highest level of cyber security.

Forti5 Technologies are one of the certified business qualified to undertake the certification assessment for the IASME IoT Cyber certification. IASME fixes the certification fee, but we at Forti5 Technologies take the time to explain the assessment so that the company understands what is expected and why it is necessary.

If you want to know more about how we at Forti5 Technologies can help you on the certification journey, do not hesitate to contact us.