The UK enacted the Product Security and Telecommunications Infrastructure Act 2022, aimed at ensuring intelligent consumer products maintain strong cybersecurity defenses against attacks.

The legislation defines a connected/smart product as one linked to the internet or another network, typically featuring an app and wireless connectivity — collectively part of the Internet of Things (IoT).

Covered product categories include connected appliances (fridges, washing machines), connected safety products (smoke detectors, door locks), home automation and alarm systems, children's toys and baby monitors, IoT hubs and base stations, wearable fitness trackers, handheld GPS devices, and smart home assistants, smartphones, cameras, TVs, and speakers.

Without baseline security, these devices can allow criminals to steal personal data, access microphones and cameras or hijack a device.

IASME operates a certification scheme helping manufacturers improve and certify device security, originally funded by the Department of Digital, Culture, Media and Sport, aligned with ETSI EN 303 645 standards.

The IoT Cyber Assured scheme meets Secure by Design requirements, and Forti5 Technologies is a certified body qualified to conduct IASME IoT Cyber certification assessments.