Cybersecurity Services
for Connected Products

Wide portfolio of cybersecurity services available worldwide

With the introduction and continuous expansion of the Internet of Things (IoT), the world becomes more and more connected. The combination of “smart” devices, mobile or web applications used to interact with them and cloud services allowing them connect with each other lead to the development of overlapped IoT ecosystems.

Historically, the world of IoT products has been driven in the past years strongly by functionality. However, we are at a point where cybersecurity issues associated with these products are not theoretical anymore, and can very well impact the products that we use in our daily life.

Currently, there are multiple internationally recognized standards, frameworks and certification schemes that could help manufacturers decide which set of security functionalities they would like to include into their products. For instance, the IEC 62443 family has become the reference standard for industrial cybersecurity, covering components and systems. ANSI UL 2900 is seen as a reference family for security in medical devices. ETSI EN 303 645 is a recently finalized standard seen as the main reference for consumer IoT products. Finally, ISO SAE 21434 is becoming a recognized standard for cybersecurity processes and functionalities in connected vehicles.

BUREAU VERITAS EXPANDS CYBERSECURITY OFFER WITH SECURA

Bureau Veritas has completed the acquisition of Secura B.V. (starting with a majority stake), an independent service company specializing in cybersecurity services. Secura will be a cornerstone in the cybersecurity strategy of Bureau Veritas.

Read More

Discover the independent security assessments we provide to our customers in terms of cybersecurity of systems, assets and products against recognized standards.

Infographics on BV cybersecurity services vEN

OUR SERVICES

Bureau Veritas is your partner in the world of product security evaluation, compliance and certification. Our portfolio of possible services includes a broad selection of standards and certification schemes, covering multiple product domains. Because of this, we define our services in line with Development, Support and Preparation, Compliance and Testing and Certification, for various types of connected products. This is summarized below.

IoT Markets

CONSUMER IoT
Support and Preparation	- Design Reviews - Validation and Penetration Testing
Compliance and Testing	- ETSI EN 303 645 - P-SCAN (product vulnerability scanning)
Certification	- BV IoT Class 1 (CTIA 1) - BV IoT Class 2 (OWASP) - BV IoT Class 3 (ETSI EN 303 645) - Common Criteria Certification - Radio Equipment Directive (RED) - EUROSMART IoT Certification

MEDICAL DEVICES
Support and Preparation	- Design Reviews - Validation and Penetration Testing - Code Reviews - Processes Reviews
Compliance and Testing	- IEC 62443 compliance - UL 2900 compliance
Certification	- UL 2900 Certification - Common Criteria Certification - EU MDR Compliance Gap Analysis - FDA Compliance Gap Analysis

NETWORK PRODUCTS
Support and Preparation	- Design Reviews - Validation and Penetration Testing
Compliance and Testing	- IEC 62443 compliance
Certification	- Common Criteria Certification - BSPA Certification

CONNECTED VEHICLES
Support and Preparation	- Review of Processes and Consultancy in Drafting/Implementation - Workshops on Cybersecurity and Regulatory Requirements - Risk Assessments on Vehicles and Components - Penetration Testing of Components and Systems
Compliance and Testing	- ISO/SAE 21434 Compliance Gap Analysis
Certification	- UNECE Cybersecurity (R155) and Software Updates (R156) Compliance Gap Analysis - UNECE Cybersecurity (R155) and Software Updats (R156) Type Approval - Common Criteria Certification

INDUSTRIAL PRODUCTS
Support and Preparation	- Design Reviews - Validation and Penetration Testing - Review OD Development Processes - IEC 62443 Workshops
Compliance and Testing	- IEC 62443 Compliance gap Analysis
Certification	- IECEE certification (IEC 62443) - Common Criteria Certification

Consumer IoT

Medical Devices

Network Products

CONNECTED VEHICLES

Industrial Products

White Paper Download

Please complete the form to download the white paper

First name

Last name

Phone

Company

Country / Territory

How can we help you?

Would you like to receive marketing communication from Bureau Veritas?

Yes

INFORMATION NOTICE TO DATA SUBJECTS
Your personal data are collected by Bureau Veritas Consumer Products Services Division (“BVCPS”), through its entity Bureau Veritas Hong Kong Limited (having its registered office at 1/F, Pacific Trade Centre, 2 Kai Hing Road, Kowloon Bay, Kowloon, Hong Kong), as well as the BVCPS affiliate(s) with which you had, have or will have a business relationship or that otherwise decide(s) which of your personal data is collected and how it is used.  A list of BVCPS affiliates is available at: BVCPS Locations (https://www.cps.bureauveritas.com/sites/g/files/zypfnx236/files/media/document/BVCPS%20Locations_20210611_for%20web.pdf)
Your personal data are subject to computer processing in order to respond to your requests and to provide you with additional information about BVCPS services, events or topics that may be of interest to you on the basis of your consent to the processing of your personal data for that purpose (by checking the box below).
Your personal data are intended for use by the relevant business departments of BVCPS and/or their service providers depending on the nature of your requests, as well as by BVCPS IT department.    Your personal data will be retained until the earlier of (a) one year after the last communication, or (b) your request to delete the personal data. 
Your personal data may be transferred outside the European Union, on the basis of your explicit consent, as the data subject, to the proposed transfer. By checking the box below, you are providing your explicit consent to the proposed transfer, with your acknowledgement of the possible risks of such transfer due to the absence of an adequacy decision pursuant to Article 45 of the General Data Protection Regulation of 27 April 2016 or of appropriate safeguards pursuant to Article 46 of the General Data Protection Regulation of 27 April 2016.
In accordance with the French Data Protection Act of 6 January 1978 as amended and the General Data Protection Regulation of 27 April 2016, you may have the right to access, rectify and erase any personal data concerning you, as well as the right to limit the processing, the right to oppose to the processing or the right to portability of your personal data. You have the right to withdraw your consent at any time by connecting to the site or application (https://personaldataprotection.bureauveritas.com). and unchecking the box dedicated to the collection of your consent. You also have the right to set out general and specific guidelines that define how you intend these rights to be exercised after your death. You can exercise your rights by e-mail at the following address: https://personaldataprotection.bureauveritas.com. Finally, you have a right to lodge a complaint to the Commission Nationale Informatique et Libertés (CNIL) or the relevant authorities in your country.
Fields marked with an asterisk must be filled in. Otherwise, BVCPS would not be able to respond to your requests and/or provide you with additional information.

Cybersecurity Services for Connected Products