EMC China Lab

What is the UK PSTI Certification?

Views :
Update time : 2024-07-17

Introduction to the Product Security and Telecommunications Infrastructure Act (PSTI Act 2022)

The UK has mandated the enforcement of the Product Security and Telecommunications Infrastructure Act (PSTI Act 2022) starting from April 29, 2024. This applies to England, Scotland, Wales, and Northern Ireland. Products within the scope of this regulation must obtain PSTI certification as soon as possible to ensure smooth entry into the UK market.

 

Obliged Entities:

Manufacturers, importers, and distributors of relevant products must comply with the security requirements of this Act. They are responsible for creating compliance declarations, maintaining appropriate records, investigating compliance failures, ensuring products are accompanied by compliance declarations, and taking action in the event of compliance failures.

 

Scope of Products for UK PSTI Certification

The certification covers most IoT/connected products, such as smartphones, smart appliances, routers, smart home assistants, wearable fitness trackers, outdoor leisure products, connected children's toys, baby monitors, cellular-connected tablets, computers for children under 14 (desktops, laptops), and products that do not connect directly to the internet but can connect to multiple other devices, such as smart lighting fixtures, smart controllers, and IoT base stations.

 

Types of involved products include smart speakers, network terminals, home cameras, wearable devices, home smart gateways, smart home printers, smart locks, and home connected sensors.

 

Exempt Products:

Computers (desktops, laptops) used by children over 14, tablets without cellular connections, medical devices, electric vehicle charging stations, smart meter products, and products compliant with relevant legislation supplied to Northern Ireland.

 

UK PSTI Certification Requirements

PSTI certification's cybersecurity requirements are mainly divided into three aspects:

1. Prohibition of universal default passwords;

2. Implementation of vulnerability disclosure management;

3. Transparency in product security update services.

These requirements can be assessed directly through PSTI certification or by referencing the cybersecurity standards for consumer IoT products, ETSI EN 303 645. Meeting the requirements of the three chapters and items of ETSI EN 303 645 is equivalent to complying with the UK PSTI certification requirements.

PSTI Act and ETSI EN 303 645 Standard Testing Process

1. Preparation of Sample Materials:

   Three sets of samples, including the main unit and accessories, unencrypted software, user manuals, specifications, related services, and login accounts.

2. Establishment of Testing Environment:

   Establish a testing environment according to the user manual.

3. Execution of Cybersecurity Assessment:

   Document review and technical testing, inspection of supplier questionnaires, and provision of feedback.

4. Vulnerability Remediation:

   Provision of consulting services to fix vulnerabilities.

5. Issuance of Report:

   Issuance of PSTI assessment report or ETSI EN 303 645 assessment report.

 

China JJR Laboratory is an IEC 17025 authorized laboratory providing UK PSTI certification and ETSI EN 303 645 standard services. Feel free to consult us for a quote. We can help you save 30% on costs.


Email:hello@jjrlab.com


Leave Your Message


Write your message here and send it to us


Related News
Read More >>
IEC EN 61326 Report for Electrical and Laboratory IEC EN 61326 Report for Electrical and Laboratory
01 .23.2025
China JJR Laboratory offers IEC EN 61326 testing for electrical and laboratory equipment, ensuring E...
CE Testing Fees for Charging Piles and Charging Gu CE Testing Fees for Charging Piles and Charging Gu
01 .23.2025
JJR Lab offers CE testing for charging piles and guns, ensuring compliance with LVD, EMC, RoHS, and ...
E-Mark Certification for Vehicle Electronic Applia E-Mark Certification for Vehicle Electronic Applia
01 .23.2025
JJR Lab provides professional E-Mark certification testing to ECE standards, ensuring fast, reliable...
Introduction to Common FCC Standards and Label Req Introduction to Common FCC Standards and Label Req
01 .23.2025
JJR Lab offers FCC certification testing per standards like PART 15 (intentional/unintentional emitt...
Introduction to FCC Part 15 Standards Introduction to FCC Part 15 Standards
01 .23.2025
FCC Part 15 sets EMC limits for RF devices to prevent interference. JJR Lab provides testing for rad...
Compliance Guide for Universal Charger CE Certific Compliance Guide for Universal Charger CE Certific
01 .23.2025
From December 28, 2024, EU mandates USB Type-C ports (EN IEC 62680-1-3:2022) for devices. JJR Lab of...
Amazon Canada: Candle and Candleholder Certificati Amazon Canada: Candle and Candleholder Certificati
01 .22.2025
Amazon Canada requires candles and candleholders to meet specific regulations and standards. JJR Lab...
Compliance for Baby Pacifiers & Clips on Amazo Compliance for Baby Pacifiers & Clips on Amazo
01 .22.2025
Ensure compliance for baby pacifiers & clips on Amazon Australia with AS 2432, EN 1400, or EN 12...

Leave Your Message