Product Manufacturers

With the introduction and continuous expansion of the Internet of Things (IoT), the world becomes more and more connected. The combination of “smart” devices, mobile or web applications used to interact with them and cloud services allowing them to connect with each other lead to the development of overlapped IoT ecosystems.

Moreover, as the IoT has long ago passed the barriers of consumer products, organizations are making use of such products and solutions, making them an integral part of the ecosystem. In the ecosystem of IoT, manufacturers of products hold one of the most important roles: they are ultimately the ones that decide which features will be included in their products.

Historically, the world of IoT has been driven by functionality in the past years. The products with the most and more revolutionary features got an edge over their competition. Recently, the aspect of cybersecurity in IoT has become a topic that cannot be ignored. Moreover, we are at the point when cybersecurity issues associated with these products are not theoretical anymore and can very likely happen with the products that we use in our daily life. Scaling up this idea to the fact that what we call today IoT is not anymore linked fully to smart gadgets, but also includes vehicles, medical devices, industrial and telecommunication equipment, and more, gives the perspective of how critical a cybersecurity attack can prove to be.

How to secure the IoT domain?

The IoT domain has lacked for many years a clear set of relevant standards and frameworks to support manufacturers in developing good security into their products. Luckily, these days are gone. At the present moment, there are multiple internationally recognized standards, frameworks, and certification programs that could help manufacturers decide which set of security functionalities they would like to include in their products.

There are several examples that can be highlighted. The IEC 62443 family has become over the years the reference standard for industrial cybersecurity, covering also the components and systems. UL 2900 is seen as a reference family for security in medical devices. ETSI EN 303 645 is a recently finalized standard seen as the main reference for consumer IoT products. Finally, ISO 21434 is becoming a majorly recognized standard for cybersecurity processes and functionalities in connected vehicles.

Secura is your partner in the world of a product security evaluation, compliance, and certification. Our portfolio of possible services includes a broad selection of standards and certification schemes, covering multiple product domains. We offer our services based on our three pillars ‘Support and Preparation’, 'Compliance' and 'Certification'.