Security Evaluation Standard for IoT Platforms (SESIP)

The Security Evaluation Standard for IoT Platforms (SESIP) is a specialized security framework designed to evaluate and certify the security of IoT platforms and has been adopted by the European Committee for Standardization (CEN) and the European Committee for Electrotechnical Standardization (CENELEC) as a European Standard (EN 17927). SESIP provides a standardized method for assessing the security features of IoT devices, ensuring they meet industry-recognized security requirements, thus certification helps manufacturers and developers identify vulnerabilities, comply with global security standards, and build trust in their IoT products.

SESIP requirements are based on the Common Criteria standard (ISO 15408), but they have been specifically modelled for the evaluation of IoT platforms. SESIP certification is structured into different levels – SESIP Level 1 to SESIP Level 5 – each representing a progressively higher degree of security assurance, which allows SESIP to cater to a wide range of IoT devices, from basic sensors to complex systems. By understanding and selecting the appropriate SESIP level, IoT manufacturers can ensure their devices meet the necessary security standards and are protected against relevant threats.

What atsec offers:

atsec is provisionally licensed to perform evaluation under the TrustCB SESIP Scheme (SESIP Level 1- SESIP Level 2).

Our SESIP portfolio encompasses the following services:

• A readiness assessment to help you estimate the level of effort required for your product to comply with SESIP requirements
• SESIP assessments at SESIP level 1- SESIP level 2