Security & cloud

Prepare the device, companion app and update path for testing

The Korean IoT scheme supports security in connected products and linked mobile apps. Firmware, authentication, communications, updates and service integrations must be ready for testing.

Source record updated:

Discuss your certification →

Scope and applicability

Korean connected product security certification

Distinguish voluntary security certification from product safety, radio and public procurement requirements. Confirm eligible products, levels and current criteria with KISA.

Korean certification schemes and international standards are different. A translated guide does not extend a Korean certificate to other countries. Confirm the target market, product classification and current requirements with the relevant body.

Who this is for

  • Connected device manufacturers
  • Companion mobile app developers
  • Teams preparing product security evidence

Documents to prepare

Product and integration architecture

Identify device, app, server and communication boundaries and versions.

Security and update description

Document authentication, access, protected communications, firmware updates and vulnerability response.

Products and test environment

Supply devices, accounts, linked apps and reproducible test conditions.

Preparation process

  1. Confirm eligibility and level

    Discuss product characteristics, criteria and application conditions.

  2. Check devices and apps

    Test communications, accounts, updates and exposed functions and fix defects.

  3. Complete testing and corrections

    Submit products and address findings and retests.

Timing

Development readiness, test queues, firmware fixes and retesting affect duration. Align product availability with the intended launch.

Agency fees

Testing and certification fees

Confirm current fees and support with the operator

Conditions vary by product, level, testing scope and application date.

Sources and references ↗

Document automation and management cost KRW 300,000 per month. Expert services and certification body testing or assessment fees are separate. Specify supports preparation; the relevant authority or certification body makes the final decision.

Pricing and certification costs →

Optional expert consulting

Expert review and consulting are optional, separately scoped services. Choose support for IoT Security Certification based on your team's readiness and the evidence or assessment preparation you need.

  • Confirm institutional testing, assessment and registration fees separately in the contract.
  • Development fixes, clinical studies where applicable, security equipment and infrastructure operations may require separate budgets.
  • Confirm internal staffing, travel, translation, VAT, surveillance and renewal costs in the quotation.

Questions and answers

Is testing the device alone sufficient?

KISA guidance includes products and linked mobile apps. Confirm scope for the actual service architecture.

Is certification still free?

Historical notices do not establish current fees. Development fixes and consulting are also separate.

Does it replace radio or electrical safety approval?

No. Those conformity procedures have different purposes and legal bases.

Sources and references

Related guides