At Rtone, we have decided to define a security baseline to apply to our projects. This security baseline is based on the ETSI EN 303 645 standard, which is dedicated to the security of consumer IoT devices.
We chose this standard because it is recent, comprehensive, and currently serves as a reference for evaluating cybersecurity requirements for the RED, pending harmonized standards.
This baseline allows us, for most projects, to address all identified threats during the risk analysis phase and meet the requirements of the applicable standards.
In cases where the project requires a higher level of security, additional measures are taken to enhance the security level and align with standards suited to the product.