scope:

The present document serves as guidance to help manufacturers and other stakeholders in meeting the cyber security provisions defined for Consumer IoT devices in ETSI EN 303 645 [i.1] and ETSI TS 103 645 [i.2].

The present document is complementary to ETSI EN 303 645 [i.1] and ETSI TS 103 701 [i.3]. It explains the relationship between these specifications and how they can be used together. It also provides a non-exhaustive set of example implementations that can be used to meet the provisions of ETSI EN 303 645 [i.1] and ETSI TS 103 645 [i.2], noting that not all possible implementations are included. Where relevant, pointers to supporting specifications are provided. Usage by industry players as well as future development of standards, such as specialisation into precise use cases, or certification aspects, are being given consideration.