The Australian Cyber Security Label is part of the Australian Cyber Security Strategy 2023-2030

Australian Government Department of Home Affairs

For manufacturers · Australian Security Labelling Scheme for Smart Devices

Be recognised for your commitment to cyber security

Show that your products meet recognised cyber security requirements through independent assessment. Certified products may display theAustralian Cyber Security Certified Labeland appear on the public register — helping consumers, retailers, businesses, and government buyers spot assessed products.

Australian Cyber Security Certified label

Why certify your product?

Certification gives manufacturers a clear way to demonstrate security commitment and stand out in a market where buyers expect more.

1

Give customers a reason to choose you

The label is a visible signal at the point of purchase that your product has been independently assessed.

2

Build trust

Independent assessment supports confidence with consumers who want connected devices designed with security in mind.

3

Differentiate from uncertified products

Stand apart from devices that have not been assessed under a recognised scheme.

4

Support retail and procurement

Help retailers and procurement teams identify products that meet recognised cyber security requirements.

5

Prepare for rising expectations

Position your products for growing cyber security expectations from buyers, partners, and policy.

Is my product eligible?

The Scheme focuses on consumer smart devices that connect to the internet or a network. Confirm scope before you invest in an application.

Typically in scope

Internet- or network-connected consumer smart devices, for example:

  • Connected home appliances
  • Security cameras
  • Smart home devices
  • Routers and gateways
  • Connected toys
  • Other consumer IoT products

Out of scope (examples)

These product types are not covered by the Scheme:

  • Smartphones
  • Laptops
  • Motor vehicles
  • Medical devices

Not sure if your product qualifies?

Read the Product Eligibility and Scope guidance, or contact us before you start an application.

Choose the right certification level

Four progressive levels of assurance. Higher levels increase confidence that the product was designed, built, and tested with security in mind.

Level 1

Demonstrates compliance with Australia’s essential smart device cyber security requirements through independent verification.

Level 2

Demonstrates conformance with the full ETSI EN 303 645 baseline, providing assurance beyond Australia’s minimum requirements.

Level 3

Demonstrates that secure development practices have been independently assessed throughout the product lifecycle.

Level 4

Demonstrates the highest level of assurance through comprehensive independent assessment, including penetration testing.

Your path to certification

Four steps from choosing a product and level through to label use and public register listing.

Path to certification: 1 Choose your product and level, 2 Prepare your application, 3 Work with a test laboratory, 4 Get certified.

Ready to start an application?

Review the Application Guide for what to provide and how to submit, then begin your application with the Scheme Operator.

Preparing for certification

You don’t need everything perfect before you start — but you should understand your design, controls, and available evidence.

Before you apply, consider:

  • Whether your product is eligible
  • Your target certification level
  • Who can explain security architecture and controls, and coordinate evidence
  • Existing docs, assessments, test reports, and certifications
  • Which approved laboratory you will use

Evidence and information that may be required

Requirements are level-dependent. Typical areas include:

  • Product architecture and connectivity
  • Authentication and access controls
  • Software and firmware security
  • Vulnerability management
  • Security updates and support period
  • Data and communications protection
  • Secure development practices
  • Technical docs and test results
  • Product samples
Evidence Guidance

How much does certification cost?

Certification involves two separate cost components. Higher levels generally mean more assessment effort and cost.

Payable to Scheme Operator

Scheme certification fee

Covers processing, assessment of the application package, and issuing certification under the Scheme.

Certification Fees and Charges

Engaged directly with a lab

Laboratory assessment costs

Paid to an approved test laboratory. Depends on the product, target level, existing evidence, and testing required.

Approved Test Laboratories

Supporting information

Guidance documents for eligibility, levels, application, evidence, labs, fees, and label use. Links are placeholders until final document URLs are confirmed.

ResourceLink
Product Eligibility and ScopeView →
Certification LevelsView →
Security RequirementsView →
Application GuideView →
Evidence GuidanceView →
Approved Test LaboratoriesView →
Certification Fees and ChargesView →
Scheme RulesView →
Label Use GuidelinesView →

Need help getting started?

We can help with eligibility questions, choosing a certification level, understanding evidence requirements, or finding an approved test laboratory.