CCTV towers achieve SBD Secure Connected Device accreditation

• Watchtower’s WT2- Lite Tower is an AI equipped tower which offers all-in-one surveillance solution, specifically designed to meet the challenges of securing valuable, remote and vulnerable sites
  
  
• Watchtower’s WT1- SBD  Premium takes security to the next level. Using the same high quality technology as the WT2, but consisting of a heavy Secured by Design frame. Thanks to its SBD accreditation the WT1 is ideally suited for high-risk and governmental projects

Lyn Poole, Secured by Design, said: “I am delighted that Watchtower Security Solutions WT1- SBD Thermal Premium and WT2- PTZ Lite have achieved the Secure Connected Device accreditation. They are the first temporary CCTV security company to achieve this accreditation, having also achieved the IASME Level 2 IoT Cyber Assurance certificate. 

“The government mandated compliance with the Product Security and Telecommunications Infrastructure Act 2022 by 29^th April 2024 so it is critical that businesses who produce or supply IoT connected products ensure that they are sighted on this law and have taken the appropriate steps to ensure that they are compliant with its requirements.  

“Obtaining the Secure Connected Device accreditation will build confidence and trust in Watchtower Security Solutions CCTV towers and I hope that other companies within the industry and beyond will take note of this achievement and follow in their footsteps. The regulatory framework within the law contains an enforcement regime with both civil and criminal sanctions for non-compliance, so the penalties for non-compliance can be harsh”. 

Doug Edwards, Director of Watchtower Security Solutions UK, said: “We’re very pleased to be the first company in our sector to have obtained the SBD Connected Device accreditation, confirming Watchtower’s effort to ensure its clients can rely on the highest level of Security.

“To stay at the top of our field, we’re continuously rethinking our way of working and improving our products. This accreditation gives great confidence to our team and encourages us to continue to do so in the future”. 

Find out more about Watchtower Security Solutions range of SBD accredited products here.

The Product Security and Telecommunications Infrastructure Act

The Product Security and Telecommunications Infrastructure Act became law in December 2022, with compliance with the law mandated by 29th April 2024. The law requires manufacturers, importers and distributors to ensure that minimum security requirements are met in relation to consumer connectable products that are available in the UK and provides a robust regulatory framework for non-compliance.

The law applies to all consumer IoT products, including but not limited to:

• Connected cameras
• connected safety-relevant products such as door locks
• connected home automation and alarm systems
• Internet of Things base stations and hubs to which multiple devices connect
• smart home assistants
• smartphones
• smoke detectors
• connected fridges, washers, freezers, coffee machines 

The legislation covers the following three main security features:

• Consumer IoT devices will not be allowed to have universal default passwords
• Consumer IoT devices will have to have a vulnerability disclosure policy
• Consumer IoT devices will need to disclose how long they will receive software updates

The robust regulatory framework within the law contains an enforcement regime with civil and criminal sanctions aimed at preventing insecure products being made available on the UK market within it. This enforcement regime enables the government to take a range of actions against companies that are not compliant with the law. This includes: 

• Enforcement Notices: Compliance notices, Stop notices and Recall notices
• Monetary penalties: the greater of £10 million or 4% of the company’s qualifying worldwide revenue
• Forfeiture: of stock which is in the possession or control of any manufacturer, importer or distributor of the products, or an authorised representative

These minimum security requirements contained within the law are based on the UK’s Code of Practice for Consumer IoT security, the leading global standard for consumer IoT security ETSI EN 303 645, and on advice from the UK’s technical authority for cyber threats, the National Cyber Security Centre. 

The regime will also ensure other businesses in the supply chains of these products play their role in preventing insecure consumer products from being sold to UK consumers and businesses.

How can SBD’s Secure Connected Device accreditation help with compliance? 

Secured by Design’s (SBD) Secure Connected Device accreditation, developed in consultation with the Department for Science, Innovation and Technology (DSIT), helps companies to get their products appropriately assessed against all 13 provisions of the ETSI EN 303 645 standard, a requirement that goes beyond the Government’s PSTI Act legislation so that companies can not only demonstrate their compliance with the legislation but help protect themselves, their products and customers. It is a unique and recognisable accreditation that highlights products as having achieved the relevant IoT standards and certification. 

The SBD Secure Connected Device IoT Assessment identifies the level of risk associated with an IoT device and its ecosystem, providing recommendations on the appropriate certification routes with one of the SBD approved certification bodies. Once third-party testing and independent certification for a product has been achieved, the company can apply to become SBD members, with the product receiving the SBD’s Secure Connected Device accreditation.

In addition, the Secure Connected Device accreditation ensures compliance with evolving government requirements and cyberthreats, via an annual appraisal. 

The Secure Connected Device accreditation is the only way for companies to obtain police recognition for the security of their IoT products in the UK. 

Find out more on SBD’s Secure Connected Device accreditation and the companies who have achieved it to date at www.securedbydesign.com/IoT