Forti5 Technologies was one of a small number of assessing companies participating in the IoT Cyber Assurance scheme pilot.

The IoT Cyber schemes certify internet-connected devices against key security controls, demonstrating commitment to best-practice security. The Level 2 version goes beyond verified assessment by providing independent third-party testing and certification.

Among the first to achieve Level 2 (audited) certification was Chess with their Mymesh smart building wireless technology. Chess Wise is a Dutch company headquartered in the Netherlands with a UK sales office, rooted in the banking industry — a background that has shaped their strong security focus. They applied secure-by-design principles from the outset, aiming for a scalable, wireless, and affordable secure smart building platform.

Assessor Gary Wills tested the Mymesh system, which includes the Mymesh Network (actuators and sensors), ethernet gateway, cloud server (Edge42), and Bluetooth commissioning gateway. The audit involved documentation review, interviews, and physical device testing.

Gary noted: "The mentality at Chess for cyber is the kind of security you might expect in a bank! Every 10 seconds, the encryption keys change," making rapid compromise effectively impossible. Additionally, any attempt to inspect the chip causes it to automatically wipe itself.

Mymesh stated that IASME IoT certification and assessor feedback were valuable tools for demonstrating security posture to customers. External certification reassures clients that an independent third party has audited the system.

The Mymesh unique network protocol achieved Level 2 certification, meaning its security aligns with all 13 ETSI security requirements plus data privacy requirements.

The IoT Cyber Assurance certification process includes an interview, documentation review, and hands-on IoT system testing, making it accessible to most SMEs and start-ups.