 
Summary of the IoT Product Security Conformity Assessment Scheme  Policy Draft  
 
April 2024  
 
1. Name of the conformity assessment procedure  
IoT Product Security Conformity Assessment Scheme  
 
2. Detailed objective and rationale  
The number of IoT products has been rapidly increasing in recent years, and so has the 
number of cyber -attacks that target their vulnerabilities. Against this backdrop , 
countries around the world are considering schemes to ensure security measures for IoT 
products.  
 
To promote IoT products that have appropriate security measures in place while taking 
into account similar efforts in other countries , Japan has released a d raft policy for 
a voluntary scheme with multiple conformity assessment levels.  The scheme may be 
incorporate d into future procurement rules, including those of government agencies and 
critical infrastructure providers.  
 
3. Mandatory p roduct characteristics , mandatory production methods , etc. 
Products that have the ability to  send and receive data using Internet Protocol (IP), 
including products that are indirectly connected to the internet (excluding general -
purpose IT products to which users can easily alter security measures such as via 
software products (PCs, tablets, smar tphones, etc.))  
Note: The scheme is voluntary.  
 
4. Proposed date of scheme official announcement/start  
The official announce ment of the start of the scheme is scheduled around July to 
September 2024.  
The scheme  is scheduled to start  in part by March 31, 2025. 
 
 