this needs to be defined. The label should provide a clear indication of the security achieved. AIOTI’s workshop on Security and Privacy in the Hyper-Connected World133 introduced a set of possible labels: 1) Security certified by third party 2) Managed security (maintained) 3) Secure update mechanism implemented (maintainable) 4) Access-controlled device, based on “trusted manufacturer” and self-assessment of security 5) No security. Separately, the Ministry of Economic Affairs and Climate and the Ministry of Justice and Security in the Netherlands134 have requested the industry to design a security labelling system and guidelines specifying: – Level of security, – Whether the device is automatically updated, – Lifespan of support by the manufacturer, – Device performance and functions when it is disconnected from the internet. In parallel, during the 2018 edition of the Singapore International Cyber Week (SICW)135, the Cyber Security Agency of Singapore hosted a leadership dialogue with various National Certification Bodies to exchange Compliance class Class 0 Class 1 Class 2 Class 3 Class 4 Confidentiality Basic Basic Medium High High perspectives on a practical and balanced approach to address the evaluation of IoT devices, in consideration of the fact that this space is characterised by fast-moving innovations. IoT Security Foundation The IoT Security Foundation’s (IoTSF) IoT Security Compliance Framework136 aims to consistently evaluate the security of a wide range of IoT devices. To make the framework more practical across a variety of applications, IoTSF adopts a risk-based approach derived from the commonly used CIA Triad. The framework defines five Compliance Classes that achieve progressively higher levels of Confidentiality, Integrity and Availability as depicted in Figure 8. – Class 0: where compromise to the data generated or loss of control is likely to result in little discernible impact on an individual or organisation. – Class 1: where compromise to the data generated or loss of control is likely to result in limited impact on an individual or organisation. – Class 2: in addition to class 1, the device is designed to resist attacks on availability that would have significant impact on an individual or organisation, or impact many individuals. For example, by limiting operations of an infrastructure to which it is connected. Security objectives Integrity Basic Medium Medium Medium High Availability Basic Medium High High High Figure 8: IoTSF Compliance Classes137 133 AIOTI Workshop On Security and Privacy in the Hyper-Connected World Report 20160616 134 https://www.rijksoverheid.nl/documenten/rapporten/2018/04/02/ roadmap-digitaal-veilige-hard-en-software - Roadmap digitaal veilige hard en software, 2018. By Ministry of Economic Affairs, the Netherlands, in Dutch. 135 https://www.sicw.sg/ 136 https://iotsecurityfoundation.org/wp-content/uploads/2016/12/IoTSecurity-Compliance-Framework.pdf 137 https://iotsecurityfoundation.org/wp-content/uploads/2016/12/IoTSecurity-Compliance-Framework.pdf 45