PSTI Act 2022 Readiness Assessment

PSTI Act 2022 readiness for IoT manufacturers, importers, distributors. Smart Product Security regulations (April 2024+) compliance gap analysis.

pstiiot-securityconnectable-productsuk-marketsmart-homeproduct-securityvulnerability-disclosure

What you get

PSTI Act 2022 + Smart Product Security regulations readiness review for connectable products placed on UK market.

Coverage

Minimum password requirements audit
Vulnerability disclosure policy gap analysis
Support transparency / minimum support period statement
Statement of Compliance template
Technical documentation pack

Suitable for

SME IoT manufacturers, smart-home brands, fitness wearable producers, connected appliance importers, distributors of internet-connectable products on UK market.

Delivery

72h from intake completion.

📺 Personalised walkthrough & sample output

📦 Delivery & deliverables

Turnaround: assessment delivery within 36 business hours after intake completion. Multi-jurisdiction packages: up to 5 business days.
Sample output: a redacted sample deliverable (report + appendices) is available on request — email [email protected] with the product name.
Revision & satisfaction: one round of revisions included; if the deliverable does not meet the agreed brief, full money-back refund within the 14-day window.

Sources:

PSTI Act 2022 (legislation.gov.uk)

Cyber Essentials 2026 Coverage (IoT Device Lens)

PSTI Act 2022 applies to connectable products placed on the UK market; CE 2026 applies to the IoT manufacturer's own IT estate. The pack covers both:

Firewalls — Network boundary configuration for IoT manufacturing networks; perimeter rules separating R&D from production from corporate
Secure configuration — Secure configuration baseline for IoT device development environments; CIS-benchmark hardening for build / test infrastructure
User access control + MFA mandate — MFA enforcement on developer accounts, build servers, signing key infrastructure (CE 2026 mandate 28 April 2026); RBAC for engineering staff with access to production signing keys; least-privilege for support engineers
Malware protection — Endpoint protection / EDR coverage on developer workstations and build servers (supply-chain attack defence)
Security update management — Patch management cadence for build infrastructure + vulnerability management for IoT device firmware (PSTI Section 5 minimum support period overlap)