Emerging technologies and the cyber lab

Cyber Lab

Security assurance for products, services and solutions to create more security and resilience in their manufacture, installation and use.

Security assurance for products, services, and solutions to create more security and resilience in their manufacture, installation, and use.
Red Overlay
Emerging Technologies and the Cyber Lab
Emerging Technologies and the Cyber Lab
Red Overlay

Prove your products, services and solutions are secure

Manufacturers and installers have a responsibility to create secure products and solutions and deliver secure services. The emergence of technologies such as IoT, OT, Blockchain and 5G raises security issues that organizations need to be aware of.

Unfortunately, there is not always a clear way to demonstrate how secure your products and services are and differentiate yourselves during the procurement process. It can also be hard to navigate the assurance schemes across regulated industries and the government sectors.

BSI can open new markets and place you ahead of competitors in your industry by helping you understand the best assurance frameworks for your organization and achieve conformance though security testing, assisting in the development of risk assessments, and supporting organizations plans to manage their supply chain.

Where emerging technologies are in use, we can help organizations understand potential risks and how to mitigate them.

Find out how we can help your organization. Reach out to our digital trust expert expert

Isabel Forkin, Global Practice Lead for Cyber Lab and Emerging Technology

Isabel is a NCSC Certified Professional and ISO 27001 Lead Auditor with over 10 years’ experience in IT Security.

Contact us

Is your organization buying safe and secure products?

It can be difficult for organizations to compare the security of different products and services, especially in the emerging technology and IoT sectors. Traditional indicators of trust may not be applicable to emerging technologies, or simply not apply to these implementations.

BSI can help organizations to manage the risks associated with Operational Technology (like ICS and SCADA), Smart products (from watches to lightbulbs), and any other connected devices they may use.

Evaluation for emerging technologies, IoT and OT:

Security Testing - Perform security testing activities to help organisations identify risks in their products, using industry-standard methodologies and frameworks.

Security in the development lifecycle - Provide assurance around the design and control of code, as well as the testing and flaw remediation processes within the development team.

Supply chain review - Understand your risk exposure through your supply chain, and manage the risk associated with lower-trust vendors.

Data in transit security – Assess how systems communicate with each other and the wider ecosystem. We use industry-standard methodologies to test the communications protocols, particularly wireless protocols, in a range of embedded devices.

Secure by Design/Default - Provide audit against the principles of Secure Design and ensuring that devices are securely configured ‘out of the box’.

GROUP

Achieving NCSC certification with the help of the BSI Cyber Lab

Certification to the CPA scheme is a challenging process. Follow the story of how the BSI Cyber Lab evaluated the Egress Protect email encryption security product and helped Egress to achieve NCSC certification.

Download now >

Industry-specific expertise

Communication Providers – BSI can provide a range of consultancy and auditing services to help with vendor management, testing, Ofcom compliance, HSCN and PSN compliance and TSR preparation.

Physical Security Systems – BSI are experts in the cyber security of physical security systems and can help manufacturers and installers to create more secure and resilient solutions.

CPNI Schemes - This Cyber Assessment of Physical Security Systems (CAPSS) scope covers systems which manage the physical security of a building. A successful outcome allows the product to be added to the CPNI Catalogue of Security Equipment.

National Cyber Security Center

CAS for Data Sanitisation and Destruction demonstrates compliance with the IS5 standard for organizations serving government customers and successful completion results in an NCSC CAS certificate. 

CTAS is a tailored assurance service that evaluates the IT security attributes of a system, product or service for a particular use and successful completion results in an NCSC CTAS certificate.

Network and Information Systems - We also have services relating to the NIS Directive, and can help Competent Authorities, Operators of Essential Services, and Digital Service Providers.

Learn more >

Our expertise

We are UKAS accredited to ISO 17025 for testing the Security of IT Products and Systems. We are an NSCS certified assessment partner. We also work with the NCSC on their pilot scheme to define a new era in product assurance.

Additional resources