Market entry

IoT certification requirements in International baselines

Standards and security baselines that travel with the product design rather than a single market.

9 certification records apply · last reviewed 2026-10-14

Certifications that apply

IEC 62368-1

IEC and EN 62368-1 safety standard

The hazard-based safety standard that replaced IEC 60950 and IEC 60065 for audio, video, information and communication technology equipment.

Open the certification page →
CB Scheme

IECEE CB Scheme certificate

An international system that lets one safety test report and certificate be converted into national certifications in participating countries.

Open the certification page →
IP

IEC 60529 IP rating

Ingress protection rating that describes resistance to dust and water, written as IP followed by two digits.

Open the certification page →
EN 303 645

ETSI EN 303 645 consumer IoT security baseline

Widely referenced baseline of thirteen security provisions for consumer IoT devices, from no universal default passwords to secure updates.

Open the certification page →
IEC 62443

IEC 62443 industrial cybersecurity

A family of standards for cybersecurity of industrial automation and control systems, covering processes, systems and components.

Open the certification page →
ISO 27001

Information security management (ISO/IEC 27001)

Certification of a management system for information security, covering how an organisation protects its own and its customers’ data.

Open the certification page →
ISO 27701

Privacy information management (ISO/IEC 27701)

An extension to ISO/IEC 27001 and 27002 for privacy information management, covering controllers and processors of personal data.

Open the certification page →
SOC 2

SOC 2 trust services report

An independent attestation report on controls covering security and, optionally, availability, processing integrity, confidentiality and privacy.

Open the certification page →
NIST 8259

NIST IR 8259 IoT cybersecurity baseline

A voluntary baseline of six foundational cybersecurity activities for connected devices, used widely in procurement and product planning.

Open the certification page →

What to prepare

  • Classify energy sources and required safeguards
  • Check component ratings and creepage and clearance distances
  • Test abnormal and single-fault conditions
  • Review the standard edition used in each market certificate
  • Choose a CB test laboratory recognised in the target countries
  • Confirm national differences before testing
  • Request the CB certificate and full test report
  • Convert the report into national certificates where needed

Frequently asked questions

Which certifications are mandatory to sell an IoT device in International baselines?

IEC 62368-1, CB Scheme, IP, EN 303 645, IEC 62443, ISO 27001, ISO 27701, SOC 2, NIST 8259. Each record lists the issuing body, what it covers and what it does not cover.

Are voluntary marks needed as well?

CB Scheme - IECEE CB Scheme certificate; IP - IEC 60529 IP rating; EN 303 645 - ETSI EN 303 645 consumer IoT security baseline; IEC 62443 - IEC 62443 industrial cybersecurity; ISO 27001 - Information security management (ISO/IEC 27001); ISO 27701 - Privacy information management (ISO/IEC 27701); SOC 2 - SOC 2 trust services report; NIST 8259 - NIST IR 8259 IoT cybersecurity baseline

Where can I read the official requirement?

Every certification record links to the issuing body or the regulation text. Start from this page, open the record and follow its source links.

Does a certificate for a module cover the finished product?

No. A module certificate covers the module; the finished device usually needs its own approval or a documented module grant reference. Confirm with the issuing body or your test laboratory.