ETSI EN 303 645 Cybersecurity for Consumer Internet Of Things: What It Is and Why It’s Important

Today, more consumer products than ever are adding connectivity turning them into IoT devices (Internet of Things) which provides a whole world of features, benefits and convenience for users. This trend is expected to further accelerate in the years to come with the global consumer IoT market forecast¹ to reach $204.8 billion by 2027, representing a 15.9% CAGR from 2021 to 2027.

But while consumer IoT devices have provided much utility and convenience in our everyday lives, they also bring with them potential cybersecurity risks due to their interconnected nature.  

What Is The ETSI EN 303 645 Cybersecurity For Consumer Internet of Things?

Why We Need The ETSI EN 303 645 Standards

The ETSI EN 303 645 standard comes at a timely moment. Today’s dizzying and expanding array of consumer IoT devices in our everyday lives today - ranging from smartwatches and fitness trackers to connected appliances - can pose a potential global cybersecurity risk if not properly addressed.  

A survey⁴ found that smart homes experience more than 12,000 cyber-attacks weekly. These homes are equipped with IoT-devices, such as TVs, thermostats, and security system cameras.  

Consumers are not the only ones affected by cyber incidents related to IoT devices: a survey conducted by security software company Irdeto⁶ revealed that 8 out of 10 healthcare organisations (82%) have experienced IoT-focused cyberattack in 2019, which compromised end-user safety.

With consumers increasingly reliant on these consumer IoT products and entrusting them with their personal data, the ETSI EN 303 645 provides a cybersecurity baseline which consumers can identify if a consumer IoT is safe or risky to use.  

For manufacturers, meeting the ETSI EN 303 645 standard for their consumer IoT products provides consumers with greater assurance and confidence to purchase.

The ETSI EN 303 645 Cyber Security for Consumer Internet of Things is one of the first cohesive global standards for IoT cybersecurity, and its comprehensiveness is one reason why it has emerged as the gold standard in this space.  

What ETSI EN 303 645 offers - with its 14 areas covering consumer IoT cybersecurity and data protection - is a highly achievable, single target for manufacturers and IoT stakeholders to attain.  

For consumers, choosing products which meet the ETSI EN 303 645 standard also reduces any potential consumer IoT cybersecurity risks they may face.  

For manufacturers, ETSI EN 303 645 provides a framework, helping them ensure their products are designed to meet its mandatory provisions, 33 requirements and 35 recommendations.  

To provide consumers with greater confidence and to meet potential future regulatory compliance needs, manufacturers can work with organisations such as TÜV SÜD for their ETSI EN 303 645 testing and Attestation of Conformance (AoC).