{"id":1069,"date":"2025-06-02T15:35:39","date_gmt":"2025-06-02T05:35:39","guid":{"rendered":"https:\/\/comtestgroup.com.au\/?page_id=1069"},"modified":"2025-11-14T08:06:56","modified_gmt":"2025-11-13T21:06:56","slug":"iot-cybersecurity-australia","status":"publish","type":"page","link":"https:\/\/comtestgroup.com.au\/en\/iot-cybersecurity-australia\/","title":{"rendered":"IoT Cyber Security"},"content":{"rendered":"

IoT Cyber Security<\/h1>\n\t
\n\t\t
\n\t\t\t

With effect from March 2026, connected devices intended for sale in Australia must adhere to the rules outlined in Cyber Security (Security Standards for Smart Devices) Rules 2025<\/a>. A basic framework has been set to ensure IoT (Internet-of-Things) devices are secure and customers receive clear communication regarding security issues, support periods, and product updates.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n\n\t

\n\t\t
\n\t\t\t

If your product connects to the internet, or connects to multiple products (including an internet connected device), you must meet the requirements of the Rules.<\/p>\n

    \n
  1. If using a password, the mechanisms for default passwords must be secure and not easily guessable<\/li>\n
  2. You must publish information on how consumers can report security issues<\/li>\n
  3. You must publish information on the support period for your product<\/li>\n
  4. You must have a Declaration of Compliance<\/li>\n<\/ol>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div>
    <\/div>
    \n\t
    \n\t\t\n\t\t
    \n\t\t\t
    \"\"<\/div>\n\t\t<\/figure>\n\t<\/div>\n<\/div><\/div><\/div>

    Relationship to the European Rules<\/h2>\n\t
    \n\t\t
    \n\t\t\t

    The Australian Cyber Security (Security Standards for Smart Devices) Rules 2025 are based in part on the European standard ETSI EN 303 645. If your product has been tested to this standard or to EN 18031-1, it is likely it already meets the Australian requirements for passwords.<\/p>\n

    You will still need to meet the other three requirements.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div>

    Are there exemptions?<\/h2>\n\t
    \n\t\t
    \n\t\t\t

    While all internet connected consumer-grade products must adhere to the rules, there are some that are exempt due to complexity or existing rules, including:<\/p>\n