Singapore CSA Cybersecurity Labelling Scheme for Consumer IoT, CLS(IoT)

What Singapore CSA Cybersecurity Labelling Scheme for Consumer IoT, CLS(IoT) requires

The Cyber Security Agency of Singapore (CSA) Cybersecurity Labelling Scheme for consumer IoT, CLS(IoT), comprises four cybersecurity levels corresponding to the number of asterisks on the label, with four assessment tiers completed in sequence; a product rated CLS Level 3 undergoes assessments at Tiers 1, 2 and 3. Tier 1 requires baseline security based on ETSI EN 303 645, eliminating common mistakes such as default passwords, ensuring the availability of security updates and implementing means to manage vulnerability reporting. Tier 2 requires adherence to all mandatory requirements within ETSI EN 303 645. Tier 3 requires security considerations based on the IMDA IoT Cyber Security Guide in the development lifecycle (threat modelling, secure engineering approach, secure supply chain, security testing) plus evaluation of the device software by a test laboratory using automated binary analysers. Tier 4 requires penetration testing by a test laboratory to provide a basic level of resistance against common cybersecurity attacks.

Pillar: Industrial IoT & Energy · Authority: Cyber Security Agency of Singapore (CSA) · Version: 2.0.0 · Last updated: 2026-07-10

Primary source: https://www.csa.gov.sg/our-programmes/certification-and-labelling-schemes/cybersecurity-labelling-scheme/for-manufacturers/

SHA-256 integrity: ce64e229963a2d08d0151df614588d7aa5c971d769cfb815e7760f83e03b9fbc

Primary Citations — 7 traced to source

• CSA, CLS(IoT) for Manufacturers - Cybersecurity levels & assessment tiers (four cybersecurity levels corresponding to the number of asterisks on the label; four assessment tiers completed in sequence)
• CSA, CLS(IoT) Tier 1: Security baseline requirements (based on ETSI EN 303 645; eliminating common mistakes such as default password, ensuring availability of security updates, implementing means to manage vulnerability reporting)

+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

• Discovery (free): /api/v1/nodes/sg-csa-cls-iot-labelling-scheme.json — 6-field metadata
• Vault (full node): /api/v1/vault/nodes/sg-csa-cls-iot-labelling-scheme.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
• Canonical URL: https://bidda.com/intelligence/sg-csa-cls-iot-labelling-scheme
• Back to registry: Browse all 10,085 compliance nodes