Cybersecurity certification for consumer IoT

TÜV SÜD CyberSecurity Certified (CSC) Certification

Delivering real business benefits across key segments

Delivering real business benefits across key segments

The Internet of Things (IoT) has gained importance in recent years. When assessing an IoT system, it is important to look at the entire system – from the device or smartphone application (app) to the back-end or cloud solution. In addition, more and more IoT devices are being installed in private households as part of a smart home.

The security of IoT products is paramount for consumers and users. Nobody wants to have their personal data hacked because of insufficient encryption between their smartphone and IoT device.

This is where TÜV SÜD established a cybersecurity certification to help consumer IoT device manufacturers develop products that is secure, with a recognised mark confirmed by an independent third party.


 

TÜV SÜD CyberSecurity Certified (CSC) Certification

tuv marktuv marktuv mark

  • Manufacturer-independent certification (act as a seal of quality)
  • Based on internationally recognized norms and standards (such as ETSI EN 303 645)
  • There are three levels of testing:
    Basic, Substantial and High
  • Testing of the IoT product and its development process
  • Continuous quality optimization via knowledge-sharing between TÜV organizations

Make an enquiry now

 


Three levels of testing for TÜV SÜD CSC Certification

Three levels of testing are defined as part of the TÜV SÜD CSC Certification for Consumer IoT. The scope and depth increase with each level.

Basic

Makes cyber-attacks more difficult and challenging

Substantial

Provides substantial resistance against cyber-attacks

High

Provides high resistance against cyber-attacks

Product:

  • Documentation check technical tests including safety

Company:

  • Auditing internal processes

Product:

  • Documentation check technical tests including safety
  • Penetration test
  • Cloud test
  • All ETSI EN 303 645 mandatory requirements
  • More extensive testing (additional testing criteria)

Company:

  • Auditing internal processes
  • Includes suppliers and sub-contractors processes

 

Product:

  • Documentation check technical tests including safety
  • TÜV SÜD own penetration test (including source code review)
  • Cloud test
  • All ETSI EN 303 645 mandatory requirements
  • More extensive testing (additional testing criteria)

Company:

  • Auditing internal processes
  • Includes suppliers and sub-contractors processes

 

Examples of smart home devices and Ciot products we test and certify

  • Personal fitness devices (trackers)
  • Smart home appliances
  • Wearables (smart watches)
  • Smart TVs
  • Toys
  • White goods such as fridges, washing machines, ovens and dishwashers.

 

The certification does not cover:

  • Products for cars, air travel and public transport
  • Medical devices
  • Products for military applications
  • Critical infrastructure products
  • Industrial products (IIoT) and products for power stations

 

Your business Benefits

icon

Proof of quality, trust & compliance

With a CSC certification, you prove the security of your CIoT products and provides your customer with greater confidence

 

 

icon

Gain competitive advantage

The proven security of your product sets you apart from other manufacturers. It is critical in competing with other well-established security products that have already been evaluated.

 

iconMinimise risks and identify vulnerabilities

CSC certification reveals areas of problems, potential security gap and be able to provide effective solution. It pre-empt problems that may cause serious damage to a company's reputation.

 

Make an enquiry now

EXPLORE

Consumer Products and Retail Essentials
E-ssentials

Consumer Products & Retail Essentials

Consumer trust is key when you manufacture or retail products that are part of everyone’s daily life

Learn more

TÜV SÜD CSC CERTIFICATION
Infographics

TÜV SÜD CyberSecurity Certified (CSC) Certification for Consumer IoT

Helps IoT device manufacturers develop products based on international cybersecurity standards

Learn More

Stories

ETSI EN 303 645 Cybersecurity for Consumer IoT

Find out what the ETSI EN 303 645 standard is and why it’s important for consumer IoT products and devices.

Learn More

VIEW ALL INDUSTRY RESOURCES

Next Steps

Site Selector