BSI IoT laboratory achieves accreditation for testing services

Accreditation to the international standard for testing and calibration of laboratories, ISO 17025, demonstrates the quality and credibility behind the BSI’s IoT services. It highlights the rigorous security assessment that products undergo in the BSI’s laboratory to safeguard the cyber resilience of smart devices. The accreditation can help build consumer trust that all steps have been taken to ensure IoT devices may be used safely and are protected to Best Practice levels for cyber security.

Devices tested at the BSI’s IoT laboratory in Hemel Hempstead include smoke detectors, fire detectors, door locks, connected home automation devices, smart doorbells and alarm systems, IoT-based stations and hubs to which multiple devices connect, smart home assist, smart phones, connected cameras (IP and CCTV), wearables, connected fridges, washers, freezers, coffee machines and other similar products.

The business improvement and standards company underwent rigorous independent assessment by UKAS inspectors, duly demonstrating the provision of accurate and reliable results from laboratory testing carried out at its purpose-built site.

The successful accreditation makes BSI the first UKAS-accredited laboratory for the ETSI EN 303 645 product cyber security standard, including the test methodology ETSI TS 103 701.

The audit assessed multiple aspects of the IoT laboratory’s operations, including staff qualifications, training and experience, the calibration and maintenance of equipment, quality assurance procedures, sampling practices, testing procedures, the validity of test methods, the traceability of measurements to national standards, the accuracy of recording and reporting procedures and the suitability of the testing facilities.

Product Security and Telecommunications Infrastructure Act 2022

The BSI’s achievement comes ahead of the UK’s Product Security and Telecommunications Infrastructure Act 2022 coming into force in April. This Act of Parliament applies new laws to consumer IoT products to ensure that minimum security standards are met.

Compliance with the security requirements of the Product Security and Telecommunications Infrastructure Act 2022 can be assured by having products tested and certified to the relevant parts of ETSI EN 303 645.

Carlos Perez, certification director for global digital and connected products at the BSI, explained: “The digitalisation of society offers immeasurable opportunities, from helping us manage our health via wearable technologies through to tracking the energy efficiency of our homes using connected devices. To truly unlock the potential of the IoT, consumers need to be able to trust that their smart devices are equipped with the latest cyber security protective measures that will ensure their safe use.”

Perez added: “Ahead of the Product Security and Telecommunications Infrastructure Act 2022 coming into force, independent accreditation verifies that our procedures have met a clear and internationally recognised standard and shows that the public can trust those products tested by the BSI are future-ready in an ever-evolving cyber security landscape, helping to advance the safe digitalisation of society.”

In conclusion, Perez noted: “We are proud to be recognised for the high quality of our IoT laboratory testing. Becoming the first UKAS laboratory to achieve ISO 17025 accreditation in this arena means that we’ve demonstrated our commitment to cyber security Best Practice that ensures consumer safety and security at all times.”

*For more information on cyber security certification and testing visit the BSI’s dedicated website