IoT System Certification Scheme (IoTSCS)
The IoTSystem Certification Scheme (IoTSCS), operated by STQC Dte, Ministry of Electronics and Information Technology, has aim to support all the IoT products and system.
Evaluation of IoT product &system covers assessment of all the sensing and embedding components (includes Sensors, Actuators etc), communication protocols, IoT Gateways, IoT cloud, End-user devices and user interface etc
Benefits of Certification
This provides users of IoTproduct & System confidence in the security functionality provided. It also provides users with a metric to compare the security capabilities of products that they are intending to buy.
The scheme is intended to serve many communities of interest with very diverse roles and responsibilities.
- IoT product developers,
- IoTproduct vendors,
- IoT systems integrators for IT security infrastructure
- IoTproduct researchers,
- Acquisition/procurement authorities of IoT product
- Consumers of IT Security products
Assessment Level of IoT product
Assessment of IoT devices covers basically three aspects mainly physical, Communication and its application interfaces. The IoT devices scheme comprises of three (03) levels, with each higher level being more comprehensive in the assessment. There are 3 different level of assessment, covering different security requirements. The objective of testing under each of the levels are summarized in IoT device scheme assessment Levels below:
- Level 0 is for minimal assurance level. Within 01 year of obtaining Level 0 compliance the IoT devices has to seek certification for Level 1/Level 2/Level 3.
- Level 1 is for low assurance levels and all IoT devices are expected to meet these requirements.
- Level 2 is for IoT devices that contain sensitive data, which requires protection and is the recommended level for most IoT devices.
- Level 3 is for the most critical IoT devices - applications that perform high value transactions, contain sensitive medical data, or any application that requires the highest level of trust.
- Note 1: Devices based on System on Chip (SoC), such as NVR/DVR, RDAS etc. : will be tested/audited at Level 2 of the IoT System Certification Scheme (IoTSCS).
STQC/IoTSCS/F01- Application for IoT Product Certification, STQC/IoTSCS/F03 - Technical Construction File (TCF) for IoT Device and STQC/IoTSCS/F02 - Product Series Details may be required to submit application. - Note 2: Note 2: Processor-based IT solutions such as NVR/DVR, RDAS etc.: Will undergo following activities:
a) Vulnerability assessment and configuration audit
b) Software apllication ( VMS or any other) security
c) Verification of bill of matarial and supply chain
It is to be noted that no level is provided for security assessment of processor based IT solution. However, certificate will be issued.
Application for IT Product Certification may be referred for such devices. - Note 3: Initially, Applicant need to submit filled application with supporting documents/evidence. Payment should be made only after receiving a proposal and invoice from STQC.
List of Certified Product list as per the Essential Requirements (ERs) - Click here
Important Notices/Circular/OM
Downloads
- Rules and Procedures for IoT System Certification Scheme (STQC/IoTSCS/D01)
- IoT SCS F02 Product Series Details
- Technical Construction File (STQC/IoTSCS/F03)
- Checklist for Auditors/Assessors (STQC/IoTSCS/F04)
- Application for IoT Product Certification
- Procedure for CCTV Testing Evaluation and Certification (STQC/IoTSCS/P01)
- Application for CCTV certification as per ER issued by MeitY
- Guidance on Supply Chain Security Aspects - CCTV certification
Note:Applicant may submit application for certification under IoT System Certification Scheme (IoTSCS) with requisite documentation to email id: iotscs@stqc.gov.in
Contact US
| Name and Designation | Address | Phone/Email/Fax |
|---|---|---|
Sh. Suresh Chandra, Scientist G & Head IoT System Certification Scheme (IoTSCS) | STQC Directorate 6,CGO Complex,Lodi Road, | Phone: 011 - 24301382 Fax: 011 - 24363083 |
