Cybersecurity for IoT devices

The Internet of Things (IoT) has gained importance in recent years. It is an umbrella term describing technologies that enable objects and machines to be networked and to communicate with each other, often involving wireless-enabled devices connected over Wi-Fi, Bluetooth or Zigbee. 

When assessing an IoT system, it is important to look at the entire system – from the device or smartphone application (app) to the back-end or cloud solution. In addition, more and more IoT devices are being installed in private households as part of a smart home.

The security of IoT products is paramount for consumers and users. Nobody wants to have their personal data hacked because of insufficient encryption between their smartphone and IoT device. This is where TÜV SÜD's cybersecurity tests come in. Our solutions are designed to reveal problem areas and potential security gaps and provide effective remedies. In addition, our tests pre-empt problems that may cause serious damage to a company's reputation.

OUR core SERVICES 

Certification TÜV SÜD Cybersecurity Certified (CSC) Certification • 3 levels of testing (Basic, Substantial, High) • Product and process tests • Applicable to almost all CIoT devices	Testing for standards • ETSI EN 303 645 V2.1.1. • NIST IR 8259 • IEC 60335-1 Ed. 6 Annex U	Customised services • IoT security spot check • Penetration tests • IoT security training and workshops

CERTIFICATION

• Real manufacturer-independent certification (act as a seal of quality)
• Based on the GS (Geprüfte Sicherheit) scheme
• Based on internationally recognized norms and standards (such as ETSI EN 303 645)
• There are three levels of testing: Basic, Substantial and High
• Testing of the IoT product and its development process
• Continuous quality optimization via knowledge-sharing between TÜV organizations

APPLICATION

In principle, the TÜV SÜD Cybersecurity Certified (CSC) Certification is applicable to all consumer IoT devices and routers.

EXAMPLES OF TYPICAL CIOT PRODUCTS:

• Personal fitness devices (trackers)
• Smart home applications
• Wearables (smart watches)
• Smart TVs
• Toys
• White goods such as fridges, washing machines, ovens and dishwashers

THE scheme DOES NOT COVER: 

• Products for cars, air travel and public transport

• Medical devices
• Products for military applications
• Critical infrastructure products
• Industrial products (IIoT) and products for power stations

ASSESSMENT ACCORDING TO SECURITY STANDARDS

To improve the security of consumer IoT devices, the European Telecommunication Standards Institute (ETSI) has created a standard for such device, the ETSI EN 303 645. In the US, cyber security requirements for IoT devices are established by the NIST IR 8259 standard.