IoT System Certification Scheme (IoTSCS)

IoT System  Certification  Scheme  (IoTSCS)

The IoTSystem  Certification  Scheme  (IoTSCS), operated by STQC Dte, Ministry of Electronics and Information Technology, has aim to support all  the  IoT  products and system. 

Evaluation  of IoT product &system  covers  assessment  of  all  the  sensing  and  embedding components  (includes  Sensors,  Actuators  etc),  communication  protocols,  IoT Gateways,  IoT  cloud,  End-user  devices  and  user  interface  etc 

Benefits of Certification

This provides users of IoTproduct & System confidence in the security functionality provided. It also provides users with a metric to compare the security capabilities of products that they are intending to buy.

The scheme is intended to serve many communities of interest with very diverse roles and responsibilities.

• IoT product developers,
• IoTproduct vendors,
• IoT systems integrators for IT security infrastructure
• IoTproduct researchers,
• Acquisition/procurement authorities of IoT product
• Consumers of IT Security products

 

Assessment Level of IoT product

Assessment of IoT devices covers basically three aspects mainly physical,  Communication and its application interfaces. The IoT devices scheme comprises of three (03) levels, with each higher level being more comprehensive in the assessment. There are 3 different level of assessment, covering different security requirements. The objective of testing under each of the levels are summarized in IoT device scheme assessment Levels below:

• Level 0 is for minimal assurance level. Within 01 year of obtaining Level 0 compliance the IoT devices has to seek certification for Level 1/Level 2/Level 3.
• Level 1 is for low assurance levels and all IoT devices are expected to meet these requirements.
• Level 2 is for IoT devices that contain sensitive data, which requires protection and is the recommended level for most IoT devices.
• Level 3 is for the most critical IoT devices - applications that perform high value transactions, contain sensitive medical data, or any application that requires the highest level of trust.

• Note 1: Devices NVR/DVR and RDAS, which falls in IoT categories, may be tested/audited in Level 2 under IoTSCS (IoT System Certification Scheme) (requirements attached).
• Note 2: IT solutions for NVR/DVR and RDAS involving the installation of software applications on generic IT devices/servers. For auditing or testing these solutions, it is proposed that STQC conduct a vulnerability assessment and configuration audit (based on international best practices) of the generic IT devices/servers, as well as a security assessment of the software applications (based on open standard e.g. OWASP).
• Note 3: Other software pertaining to the system may be assessed as per OWASP/international guidelines.

  Certified Product List

Certified Product list as per the Essential Requirements (ERs) notified as part of the PPO for CCTV in Gazatte of India (EXTRAORDINARY, PART II—Section 3—Sub-section (ii) dated 7th March, 2024, at Sr. No. No. 1062) issued by MeitY

Important Notices/Circular/OM

• Important Notices/Circular/OM dated 05/03/2024

Downloads

• Rules and Procedures for IoT System Certification Scheme (STQC/IoTSCS/D01)
• IoT SCS F02 Product Series Details
• Technical Construction File (STQC/IoTSCS/F03)
• Checklist for Auditors/Assessors (STQC/IoTSCS/F04)
• Application for IoT Product Certification
• Procedure for CCTV Testing Evaluation and Certification (STQC/IoTSCS/P01)
• Application for CCTV certification as per ER issued by MeitY
• Guidance on Supply Chain Security Aspects - CCTV certification

Note:Applicant may submit application for certification under IoT System Certification Scheme (IoTSCS) with requisite documentation to email id: iotscs@stqc.gov.in

Contact US