Report
Consumer loT Device Cybersecurity Standards, Policies, and Certification Schemes 2025
Omdia’s Consumer IoT Device Cybersecurity Standards 2025 highlights growing global fragmentation in IoT security regulations. The report identifies three key standards—ETSI EN 303 645 (EU baseline on passwords, disclosure, updates), NIST IR 8425 (US core baseline tied to the Cyber Trust Mark), and ISO/IEC 27402-27404 (global device trust and labeling). While regions like Singapore, Japan, the EU, and the UK pursue distinct schemes, most align around ETSI principles. With 52 billion IoT devices expected by 2026, consistent frameworks are urgent. A survey of 400 consumers across 14 countries found 84 % consider security crucial and 77 % value clear labels. Omdia urges harmonization across standards to simplify compliance and ensure reliable, transparent device security for consumers worldwide.