Standards and frameworks · Certification
EN 17927:2023 Security Evaluation Standard for IoT Platforms (SESIP) – An effective methodology for applying cybersecurity assessment and re-use for connected products
PublishedPaid ·
Standards are protected by copyright and almost always sold: here you find metadata, an original summary and a link to the official catalogue page where they can be consulted or bought. The text is not reproduced.
Summary
The European standard describes SESIP, a method for evaluating the security of the components on which connected products are built, such as microcontrollers, secure elements, operating systems and libraries. Instead of evaluating each device from scratch, it certifies the security functions offered by the platform (secure boot, updates, key storage, cryptography and the like) using a common catalogue of requirements and five increasing assurance levels, so that the maker of the end device can reuse the results. It also provides packages of process requirements, for example for vulnerability and update management. It serves chip and software makers, laboratories and IoT device manufacturers who want comparable evaluations at lower cost and in less time.
Related laws and documents
Related standards
EN 17640:2022+A1:2026 Fixed-time cybersecurity evaluation methodology for ICT products
ISO/IEC 15408 (Common Criteria) Information security, cybersecurity and privacy protection – Evaluation criteria for IT security
ETSI EN 303 645 CYBER; Cyber Security for Consumer Internet of Things: Baseline Requirements
EN 18031 Common security requirements for radio equipment
Metadata and summary: CC BY 4.0 · JSON