Policies and Standards

  • Name:
    ISO/IEC 27404:2025 Cybersecurity — IoT security and privacy — Cybersecurity labelling framework for consumer IoT
  • Issuing organisation:
    International
  • Geographical Scope:
    International
  • Type:
    Guidelines / Recommendations
  • Water management focus:
    Iot, Cybersecurity, Data Management
  • Description:
    Document defines a cybersecurity labelling framework for the development and implementation of cybersecurity labelling programmes for consumer Internet of things (IoT) products. It provides requirements and guidance on the following topics: — risks and threats associated with consumer IoT products; — stakeholders, roles and responsibilities; — relevant standards and guidance documents; — conformity assessment; — labelling issuance and maintenance; — mutual recognition.
  • Status:
    Effective
  • Effect Date:
    2025
  • Resource:
    https://www.iso.org/standard/80138.html