ETSI TS 103 701 V1.1.1 (2021-08) ETSI TECHNICALSPECIFICATION CYBER; Cyber Security for Consumer Internet of Things: Conformance Assessment of Baseline Requirements 2 ETSITS103701V1.1.1(2021-08) Reference DTS/CYBER-0050 Keywords cybersecurity, loT, privacy ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.:+33492944200Fax:+33493654716 Siret N°348 623 562 00017 -APE 7112B Association abut non lucratif enregistréea la Sous-Prefecture de Grasse (06) No w061004871 Important notice The present document can be downloaded from: http://www.etsi.org/standards-search The present document may be made available in electronic versions and/or in print. The content of any electronic and/or print versions of the present document shall not be modified without the prior written authorization of ETSl. In case of any deliverable is the one made publicly available in PDF format at www.etsi.org/deliver. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSl documents is available at https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx Ifyoufinderrors inthepresentdocument,please sendyourcommenttooneofthefollowing services: https://portal.etsi.org/People/CommiteeSupportStaff.aspx Notice of disclaimer & limitation of liability The information provided in the present deliverable is directed solely to professionals who have the appropriate degree of other professional standard and applicable regulations. No recommendation as to products and services or vendors is made or should be implied. No representation or warranty is made that this deliverable is technically accurate or sufficient or conforms to any law for any particular purpose or against infringement of intellectual property rights. In no event shall ETSI be held liable for loss of profits or any other incidental or consequential damages. Any software contained in this deliverable is provided "As Is" with no warranties, express or implied, including but not limited to, the warranties of merchantability, fitness for a particular purpose and non-infringement of intellectual property rights and ETSI shall not be held liable in any event for any damages whatsoever (including, without limitation, damages for loss of profits, business interruption, loss of information, or any other pecuniary loss) arising out of or related to the use of or inability to use the software. Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm except as authorized by written permission of ETSl. The content of the PDF version shall not be modified without the written authorization of ETSI. @ETSI2021. All rights reserved. ETSI ETSI TS 103 701 V1.1.1 (2021-08) Contents Intellectual Property Rights .. Foreword.... Modal verbs terminology.. Introduction .. .9 1 Scope. .10 2 References .10 2.1 Normative references . 2.2 Informative references... 3 Definition of terms, symbols and abbreviations... 3.1 3.2 Symbols.... 3.3 Abbreviations ... 13 4 Conformance assessment methodology 4.1 Overview and document structure 4.2 Roles and objects... 4.2.1 Device Under Test (DUT) 16 4.2.2 Supplier Organization (SO) .. 4.2.3 Test Laboratory (TL) .. .17 4.3 Assessment procedure ... 18 4.4 Implementation Conformance Statement (ICS) .20 4.5 Implementation eXtra Information for Testing (IXIT)..... 4.6 Assignment of verdicts ... 4.7 Usage of external evidences . 22 4.8 Assessment scheme amendments .. 22 5 Test scenarios for consumer IoT 23 5.0 TSO 4: Reporting implementation .. 23 5.0.1 Test group 4.-..... .23 5.0.1.0 Test group objective. 23 5.0.1.1 Test case 4-1-1 (conceptual) .24 5.1 TSO 5.1: No universal default passwords . 24 5.1.1 Test group 5.1-1. 5.1.1.0 Test group objective.. 24 5.1.1.1 Test case 5.1-1-1 (conceptual) 5.1.1.2 Test case 5.1-1-2 (functional)... 5.1.2 Test group 5.-..... 5.1.2.0 Test group objec