scope:

This standard defines a framework for a connected electronic product security evaluation program.

Purpose

The purpose of this standard is to provide grounds for confidence that connected electronic products deliver the security protections claimed by their developers and deemed necessary and sufficient by an appropriate set of stakeholders. This standard is initially targeted to wireless diabetes devices and their components (e.g., operating systems, network stacks, apps).

In order to realize this purpose, this standard shares the following objectives:

- Provide for security evaluations of electronic products performed to high standards, including the ability to achieve protection and an overall contribution toward enhanced safety, privacy, and security for electronic product stakeholders, including product manufacturers, resellers, users, and administrators

- Improve the availability of connected electronic products that have been independently evaluated and certified to meet such standards

- Reduce the use of ad hoc, unreliable, and low security assurance connected electronic product development and evaluation methods that can increase risk to electronic product stakeholders

- Continuously improve the efficiency (cost and time) of the security evaluation and certification of connected electronic products