BSI Kitemark™ for IoT devices

BSI Kitemark™ for IoT devices

Red Overlay
BSI Kitemark™ for IoT devices
BSI Kitemark™ for IoT devices
Red Overlay

The BSI Kitemark for Internet of things (IoT) devices means an improved testing and certification value that is going beyond the regulations applicable and in force today and aims to get any future compliance required ahead of its time.

The certification scheme has been carefully developed based on the most relevant global and well-known security standards providing continual assurance and covering the product supply chain and life cycle. 

The Kitemark for IoT devices is based on the following security test standards and security recommendation principles amongst others:

  • ETSI EN 303 645 and ETSI TS 103 701,
  • OWASP ASVS and MASVS,
  • NIST 6 principles.

Every journey begins with one step. Clients embarking on the Kitemark journey can be assured that every step has been carefully planned and will be continually updated.

Most importantly, we know the destination of quality and security is a moving target, which is why our Kitemark certification includes continual assurance to make sure our clients are never out of step with industry standards.

The Kitemark certification scheme proves that a product has been tested for functionality, interoperability, and security.  It requires a factory annual assessment, which includes an assessment against the scheme requirements identified for all protocols and levels associated with the product, a review of your quality management system and it also includes rigorous functional testing for the hardware devices including full coverage according to ETSI 303 645/ TS 103 701 and testing for any mobile and web application used to interact with the product according to the well-known OWASP test standards.

Robust and internationally recognized, the BSI Kitemark can help enhance a manufacturer's reputation and boost customer confidence.

Scheme steps

There are three different types of BSI IoT Kitemark for IoT devices:

  • Residential products used in residential settings
  • Commercial products used in commercial environment
  • Enhanced residential and commercial products for high-value/high-risk applications.

Various testing levels

 

Steps to achieve Kitemark certification

Below you can find an overview of the steps you need to go through to achieve and maintain Kitemark certification. 

  1. Achieve and maintain a quality management system (i.e.: ISO 9001)
  2. Pass the following tests
    • Functionality - relevant product performance and safety tests
    • Interoperability - testing between devices and the internet
    • Security - testing against best practices and security standards including scanning for known vulnerabilities and security flaws 
  3. Receive ongoing, regular monitoring and assessment comprising of:
    • Functional / interoperability tests
    • Penetration testing
    • Kitemark audit to review testing results in the context of the product, and review what actions have been taken.

BSI in collaboration with Secured by Design (SBD)

Secured by Design (SBD) is the official police security initiative that works to improve the security of buildings and their immediate surroundings to provide safe places to live, work, shop, and visit.

In 2022, SBD introduced the ‘Secure Connected Device (SCD)’ accreditation scheme in line with government legislation for companies providing Internet of things (IoT) connected products. Without the appropriate levels of security, any internet-connected device or app is at risk of providing cyber criminals with the ‘key’ to accessing and stealing personal data.

BSI is an IoT certification body for the Secure Connected Device program.

Find out more >