Proving the Business Case for the Internet of Things

UL offers CTIA cyber-security certification for IoT devices

Steve Rogerson
October 25, 2018
Safety consulting and certification company Underwriters Laboratories (UL) is offering CTIA cyber-security certification for IoT devices.
The Illinois-based company has been recognised as a CTIA authorised testing laboratory (CATL) for cyber security. With this designation, UL is ready to test connected devices for the CTIA's cyber-security certification programme.
"We see security as integral to overall product safety and quality," said Ghislain Devouge, global vice president and general manager of the consumer technology division at UL. "While the CTIA certification provides minimal baseline security requirements, we believe that it is a step in the right direction for addressing cyber-security risks and complementary to more comprehensive cyber security."
The CTIA is a non-profit industry organisation that represents US wireless communications carriers and equipment manufacturers, mobile app developers and content creators. UL worked closely with the CTIA through its cyber-security working group to define the test requirements, perform pilot testing and overall help ensure interoperability between wireless devices and networks, and set standards for a secure, high-performing and innovative wireless ecosystem.
"The IoT markets have an enormous need for improving their security posture," said Devouge. "Becoming a CTIA CATL for cyber security is a key step that UL is taking to help advance safety and security within the IoT ecosystem."
The CTIA cyber-security certification programme helps establish foundational security standards for LTE and wifi enabled IoT devices, including the IoT ecosystems for smart homes, smart cities, mobile healthcare infrastructure, connected cars and personal devices.
The programme offers tiered security testing in three categories to meet the evolving security needs of IoT device manufacturers, beginning with core IoT device security features, and adding additional requirements based on increasing device complexity, sophistication and manageability. As one of only a few labs authorised by the CTIA as a part of its cyber-security certification pilot programme, UL will support the expansion of the programme through continued collaboration.
UL offers its own cyber-security certification programme called UL Cap, based on the UL 2900 standard, next to other security programmes and certifications.