What is IoT?

IoT stands for ‘Internet of Things’ which characterises the demand for more and more products to be ‘connected’. It’s the network of those ‘smart’ connected devices, people and systems and how they interconnect that forms IoT. In effort to increase efficiency and innovation, there are now lots and lots of connected devices out there. Either connected to each other in some way e.g. Bluetooth connected devices or to the wider internet / app/ cloud. Such devices include everything from smart mobile phone to watches, from fridges to door locks, from alarms to heating systems. The opportunities for devices and to change the way we live are endless.

The way in which these devices are connected does however, pose complexity and some implications about the data those devices use - how is that data is stored, how is it transferred and how’s is it encrypted. To prevent anyone without permission accessing the data there needs to be security protocols to protect you and your data. Whether this is footage from a camera, vitals stored in health app or an email address, correct procedures should be put in place, checked to ensure the safety of the devices we use. 

Who are the BSI?

BSI (British Standard Institution) is the business standards company that helps organisations all over the world with testing and training, to ensure products and services that consumers purchase meet certain criteria of excellence. 

The BSI Kitemark is a symbol of trust, signifying that each product allowed to display the mark on the packaging, has gone through a serious of tests and achieved the highest standards. For over a century, the symbol has made it easier for consumers to recognise the mark of excellence and as such, make an informed choice.

What is the BSI Kitemark for IoT Devices?

To maintain the awarded Kitemark, products must also undergo ongoing rigorous and independent assessments to make sure the device both functions and communicates as it should, and that it has the appropriate security controls in place.

This includes functional and interoperability testing, further penetration testing and an audit to review any necessary remedial action. Importantly, if security levels and product quality are not maintained the BSI Kitemark will be revoked until any flaws are rectified.

BSI Kitemark™ scheme requirements:

• Achieve and maintain conformity to ISO 9001 (Quality management system)
• Have passed the:
  • relevant product performance and safety tests
  • interoperability tests between devices and the internet
  • initial penetration tests which scans for vulnerabilities and security flaws
  • Regular monitoring and assessment comprising
  • functional/interoperability tests
  • penetration tests
  • Kitemark audit to review the penetration results in context of the product, and review what actions have been taken

Learn more about BSI and the Kitemark

Why is there a need for an IoT Kitemark?

The BSI choose to develop a kitemark specifically centred around IoT products due to the growing demand for connected products and spread of these now available for consumers.  There is a wide choice of such products in the market, from cheaper devices with limited functionality, to more complex expensive products that connect and share information between each other and the wider network.

The rise of such devices means the rules and regulations around data transfer, security and functionality need to be more stringent. The idea of this Kitemark is to mark those products that have passed the set of rigorous tests to make it easier for consumers to recognise and make an informed choice. Devices with the IoT kitemark can then be visibly seen as trustworthy, safe and secure.

According to BSI*, it is estimated that every household in the UK owns at least 10 internet connected devices, with this number expected to increase to 15 by 2020. By the same time, it is estimated that over a quarter of identified attacks will involve IoT devices, as recent high-profile breaches have demonstrated.

Learn more about ERA Protect