18 February 2025
TÜV SÜD Japan Ltd., a Japan subsidiary of TÜV SÜD, an international third-party certification body, has been authorized by the Information-technology Promotion Agency, Japan (IPA) as a Testing Service Provider under the "Labeling Scheme based on Japan Cyber-Security Technical Assessment Requirements" (Japan Cyber STAR, or JC-STAR). The IPA plans to start operating the voluntary system from March 2025. TÜV SÜD Japan, as a JC-STAR Testing Service Provider, will start accepting applications for level 1 of the scheme and provide third-party evaluation services.
What is JC-STAR?
JC-STAR was established based on the "IoT Product Security Conformity Assessment Scheme Policy" announced by the Ministry of Economy, Trade and Industry in August 2024. It is a voluntary system unique to Japan, but harmonized with domestic and international standards.
With security requirements for government-procured goods being recommended and potentially becoming mandatory in the future, IoT product vendors and distributors can gain a competitive advantage by obtaining this label. It also has the advantage of making it easier for consumers to choose safe IoT products by verifying their conformity with definded standards and creating more visibility for conformity.
Scope of the scheme
JC-STAR applies to devices that have the ability to transmit and receive data using internet protocol (IP). Even if a device is not connected directly to the internet, as long as it can connect to the internet via another device using IP, the device is within the scope of JC-STAR. On the other hand, "systems" are not covered at this time.
Certification scheme and timeline
There are four levels of conformity criteria, from ★1 (Level 1) to ★4 (Level 4).
- Level 1: uniform minimum conformity criteria and evaluation procedures
- Level 2: conformity assessment depending on the characteristics of each product type
- Levels 3 and 4: general security requirements for each product type intended for use in important systems of government agencies, critical infrastructure operators, local governments, large corporations, etc.
For levels 1 and 2, it is possible to use either a self-declaration of conformity or a third-party organization. On the other hand, levels 3 and 4 must be evaluated by a third-party organization.
The scheme was announced by the IPA on September 30, 2024, and level 1 will become operational and applications can be submitted from from March 2025. Applications for level 2 and above are planned to be accepted after March 2026.
The services of TÜV SÜD Japan
TÜV SÜD Japan (head office: Shibuya-ku, Tokyo; President and Representative Director: Andrea Coscia) will start accepting applications for JC-STAR level 1 certification from March 2025 as a JC-STAR Testing Service Provider that IoT product vendors and distributors can entrust assesments with peace of mind. We offer a comprehensive range of third-party assessment services comprising of a standard menu of services catering to each stage of of the verification process, from information gathering all the way to certification.
In addition, as soon as the IPA will start accepting applications for JC-STAR level 2, we will also commence assessment services as a third-party organization. In addition, we are preparing to obtain authorization as a "JC-STAR Independent Test Laboratory", which can provide verification for levels 3, as soon as the program is started.
About TÜV SÜD Japan
Established in 1993 as the Japanese subsidiary of TÜV SÜD – a globally acclaimed German safety and quality expert with over 150 years of history. Through testing, certification, auditing and training services, TÜV SÜD Japan supports the safety and overseas expansion of companies in a wide range of industry fields, including medical devices, industrial equipment, consumer products, automotive, food, chemicals and energy. In recent years, TÜV SÜD Japan has also focused on cybersecurity, sustainability and AI-related services. We operate a cyber security testing laboratory in Tokyo and provide cyber security testing services for IoT devices and other devices in Japan. tuvsud.com/ja-jp
Press contact: Dirk Moser-Delarami
