Underwriters Laboratories (UL) is offering an IoT security starter kit to help improve internal cyber-security capabilities to empower secure product development and lifecycle management.

The kit is based on secure development lifecycle (SDL) best practices and includes security-by-design training, SDL gap analysis, product security architecture review and penetration testing.

Users can customise these offerings based on their company’s security needs. Industrial automation control system manufacturers and commercial, consumer and medical device product manufacturers can benefit from the kit.

“With the complex nature of IoT and operational technology infrastructure, companies need to maintain the right level of security for products and systems,” said Olivier Laborie, business development director at Illinois-based UL. “At UL, we can help spot potential security flaws early in the development process through a customised security design and architecture review. We can also identify potential product vulnerabilities and provide remediation advice by conducting penetration testing of a product. We work with companies to train their personnel on an SDL framework, as well as perform a gap analysis of security processes and documentation to ensure companies are equipped to prevent, identify and respond to potential cyber threats.”

The increasing complexity of smart factories, adaptive production systems and Industry 4.0 business models introduces a set of safety and security-related issues for consideration. UL’s suite of advisory, testing and certification services, including the IoT security starter kit, can help organisations manage their cyber-security risks and validate their cyber-security capabilities.

UL has a global network of IoT and operational technology security laboratories and more than 500 security experts and advisers who have expertise in global security standards, frameworks and best practices across various consumer and industrial ecosystems.

The kit should help companies advance in-house security knowledge and capabilities, and compare internal security processes and practices to industry frameworks and standards. They will be able to prioritise processes and practices that require improvements to meet industry frameworks and standards, and understand product, security architecture and design risks through testing for vulnerabilities and exploits.

UL empowers trust in the marketplace by helping manufacturers and brands improve the security of IoT products, devices and systems through a full suite of cyber-security offerings. These services help companies understand and manage risks, secure products and protect their brand’s integrity.

UL delivers testing, inspection and certification, training and advisory services, risk management and business insights to help users in more than 100 countries achieve their safety, security and sustainability goals.