The Cyber Security Agency of Singapore (CSA) has announced significant updates to its Cybersecurity Labelling Scheme (CLS) for Internet of Things (IoT) devices. These changes, which took effect from September 22, 2023, aim to enhance the security and reliability of IoT products.

Key updates

CSA revised three publication within CLS IoT and issue the new one:

• Cybersecurity Labelling Scheme for IoT Publication No. 1: Overview of the Scheme Version 1.3
• Cybersecurity Labelling Scheme for IoT Publication No. 2: Scheme Specifications Version 1.3
• Cybersecurity Labelling Scheme for IoT Publication No. 3: Requirements for Testing Laboratory Version 1.3
• Cybersecurity Labelling Scheme for IoT Publication No. 4: Assessment Methodology Version 1.0

Under the revised scheme, Testing Laboratories (TLs) are now authorized to review the declaration of conformity for all CLS IoT levels.

Additionally, CSA has simplified the CLS IoT application process. Applicants can now submit their applications and make payments directly through the GoBusiness Portal.

In line with these updates, the CSA has also revised the list of required documents for CLS IoT application submissions. Applicants must now provide a Declaration of Conformity and the CLS IoT – Company – Supporting Evidence v1.0', replacing the original CLS IoT Conformity Checklist.

For IoT products that fall under levels 3 and 4 of the CLS, CSA has updated the requirements for binary scans. These detailed revisions are available in the CCC SP-151-2 CLS(IoT) Scheme Specifications v1.3 publication.

Furthermore, CSA has introduced a new document, CCC SP-151-4 CLS IoT Assessment Methodology v1.0. This document is designed to aid manufacturers and assessors of IoT devices in understanding the security provisions more clearly. It outlines the required security items and describes the methods for verifying compliance.

For comprehensive information on these publications and further details on the Cybersecurity Labelling Scheme, visit the CSA website at CSA CLS Publications.

‍

‍

The information has been prepared by the GMA Consult Group team.‍

GMA Consult Group provides a full cycle of international type approval and global market access services for IT, Telecom, and industrial electrical products in all countries throughout the world. With proven expertise in worldwide regulations, compliance, certification, and conformity assessment, GMA Consult Group can help your company speed up access to any market with almost zero efforts from your side.

Need your own guide to the world of certification and approvals? Don't hesitate to contact us via info@gma.trade.