ILT-U-4181
IoT Cybersecurity Certification. CTIA Certification Test Plan v2.1.1 – Level 1
DETERMINATION | METHOD |
| Terms of service and privacy policies | CTIA-3.1: documentary review of user, privacy, subscription, security, and lifecycle information |
| Authentication | CTIA-3.2: credentials, authentication mechanisms, password behavior, and brute-force resistance |
| Access controls | CTIA-3.3: authorization, privileges, management interfaces, and exposed functionality |
| Patch management and software upgrade | CTIA-3.4: update source, authenticity, integrity, notification, and recovery behavior |
| IoT device identity | CTIA-3.5: device model, unique identity, identifiers, and identity protection |
| Data protection and security design | CTIA-3.6 through CTIA-3.9: storage, transit, subscription data, and design-in controls |
| Tamper and constrained-device controls | CTIA-3.10 and CTIA-3.11: tamper evidence and resource-related applicability |
| Overall CTIA Level 1 PT performance | Qualitative comparison of PASS / FAIL / PARTIAL / NA-JUSTIFIED / UNASSESSED results with the reference evaluation |
Related products
ILT-U-1061
Common Criteria Security Target Evaluation (ASE) for IoT Systems. IoT Common Criteria Proficiency Testing Scheme – Baseline Level
ILT-U-621
Cloud Application and Configuration Security Proficiency Test. Aligned with the App Defense Alliance Cloud Application and Configuration Assessment Framework
