scope:

The present document specifies high-level provisions for the security of consumer devices that are connected to network infrastructure, such as the Internet or home network, and their associated services. A non-exhaustive list of examples include:

• connected children's toys and baby monitors;

• connected safety-relevant products such as smoke detectors and door locks;

• smart cameras, TVs and speakers;

• wearable health trackers;

• connected home automation and alarm systems;

• connected appliances (e.g. washing machines, fridges); and

• smart home assistants.

The present document provides basic guidance for organizations involved in the development and manufacturing of consumer IoT on how to implement those provisions. Table A.1 provides a basic mechanism for the reader to give information about the implementation of the provisions.

IoT products primarily intended to be employed in manufacturing, other industrial applications and healthcare are not in scope of the present document.