TÜV SÜD CyberSecurity Certified (CSC) Certification

The Internet of Things (IoT) has gained importance in recent years. When assessing an IoT system, it is important to look at the entire system – from the device or smartphone application (app) to the back-end or cloud solution. In addition, more and more IoT devices are being installed in private households as part of a smart home.

The security of IoT products is paramount for consumers and users. Nobody wants to have their personal data hacked because of insufficient encryption between their smartphone and IoT device.

This is where TÜV SÜD established a cybersecurity certification to help consumer IoT device manufacturers develop products that is secure, with a recognised mark confirmed by an independent third party.

---

 

TÜV SÜD CyberSecurity Certified (CSC) Certification

• Manufacturer-independent certification (act as a seal of quality)

• Based on internationally recognized norms and standards (such as ETSI EN 303 645)
• There are three levels of testing:
  Basic, Substantial and High
• Testing of the IoT product and its development process
• Continuous quality optimization via knowledge-sharing between TÜV organizations
  
  

Make an enquiry now

 

---

Three levels of testing for TÜV SÜD CSC Certification

Three levels of testing are defined as part of the TÜV SÜD CSC Certification for Consumer IoT. The scope and depth increase with each level.

Basic Makes cyber-attacks more difficult and challenging	Substantial Provides substantial resistance against cyber-attacks	High Provides high resistance against cyber-attacks
Product: Documentation check technical tests including safety Company: Auditing internal processes	Product: Documentation check technical tests including safety Penetration test Cloud test All ETSI EN 303 645 mandatory requirements More extensive testing (additional testing criteria) Company: Auditing internal processes Includes suppliers and sub-contractors processes	Product: Documentation check technical tests including safety TÜV SÜD own penetration test (including source code review) Cloud test All ETSI EN 303 645 mandatory requirements More extensive testing (additional testing criteria) Company: Auditing internal processes Includes suppliers and sub-contractors processes

Examples of smart home devices and Ciot products we test and certify

• Personal fitness devices (trackers)
• Smart home appliances
• Wearables (smart watches)
• Smart TVs
• Toys
• White goods such as fridges, washing machines, ovens and dishwashers.

 

The certification does not cover:

• Products for cars, air travel and public transport
• Medical devices
• Products for military applications
• Critical infrastructure products
• Industrial products (IIoT) and products for power stations

---

 

Your business Benefits

Proof of quality, trust & compliance

With a CSC certification, you prove the security of your CIoT products and provides your customer with greater confidence

 

 

Gain competitive advantage

The proven security of your product sets you apart from other manufacturers. It is critical in competing with other well-established security products that have already been evaluated.

 

Minimise risks and identify vulnerabilities

CSC certification reveals areas of problems, potential security gap and be able to provide effective solution. It pre-empt problems that may cause serious damage to a company's reputation.

 

Make an enquiry now