Manufacturer's declaration for smart consumer devices

Manufacturer's declaration
With its manufacturer's declaration, the manufacturer has assured the following points to the Federal Office for Information Security:
-
The manufacturer has declared that the product has been tested in accordance with the European Standard “Security for Consumer Internet of Things: Baseline Requirements“ (ETSI EN 303 645), the associated test specification „Cyber Security for Consumer Internet of Things: Conformance Assessment of Baseline Requirements“ (ETSI TS 103 701) and the national „Guide to Cyber Security for Consumer Internet of Things“ (BSI TR-03173) . He further declares that it meets all mandatory requirements of the aforementioned standard at the time of application and that it maintains them for the duration of the validity of the IT Security Label. In addition, the manufacturer declared that the recommended requirements of the aforementioned standard are also met at the time of application and maintained for the terms duration, unless a contrary declaration of justified deviations was submitted with this application.
-
For the terms duration, the manufacturer assured to inform the Federal Office for Information Security unsolicited if the declared characteristics of the product change as soon as they become known to it, including (temporary) disruptions of the information security of the product and security vulnerabilities.
-
For the duration of the approval, the manufacturer also assured that it would immediately fix any security vulnerabilities it becomes aware of with regard to the labeled product and notify the Federal Office for Information Security (BSI) of the status of the measures taken to this end in accordance with § 3 Section 4 Sentence 2 BSI-ITSiKV (Ordinance on the IT Security Label of the German Federal Office for Information Security).