Self-Assessment Level:
š¢ Declaration: You publicly declare that your product meets security requirements.
Process: You assess your product internally against the set security standards.
š¤© Advantage š¤©
āProvides a starting point for demonstrating your commitment to cybersecurity.
Enhanced Level:
š Validation: You provide evidence that your product is secure.
Process: A Third-Party Assessor reviews your technical documentation to confirm compliance.
š¤© Advantage š¤©
āIncreases customer confidence by offering external validation of your product's security claims.
Substantial Level:
š Rigorous Examination: A Third-Party Assessors conduct a thorough examination of your product.
Process: Third-party assessors review your product's design, perform vulnerability assessments, and conduct functional testing.
š¤© Advantage š¤©
āAssures customers that your product can withstand basic cyber threats and attacks from less skilled adversaries.
High Level:
š§Ŗ Comprehensive Evaluation: Your product faces the most stringent evaluation.
Process: Third-party assessors conduct penetration testing to assess resistance against skilled attackers.
š¤© Advantage š¤©
āDemonstrates your product's resilience against advanced cyber-attacks by highly skilled adversaries.
Each level represents a progressive step towards demonstrating the security robustness of your IoT products. From internal assessments to comprehensive third-party evaluations, the goal remains to ensure your products are equipped to handle cyber threats effectively.