FAST by cetome

Secure products, faster than ever

Fill in one questionnaire. FAST finds the threats and risks of your product, tells you which security measures to implement, and shows what you still need to do for compliance.

Describe your product About FAST

EN 303 645 is free and needs no account. The other standards come with a paid account, as they are added.

1. Questionnaire

Describe your product

A star marks the questions FAST needs.

What to do here. Answer the questions about your product: what it is, what it connects to, what it stores. Tick what is true, leave the rest. Then send: FAST does the analysis at once.

No product at hand? Start from an example

What is the product called?

IoT product description

Describe your product by answering the following questions.

Who uses the product? *

Individual users wearable, smart home A limited group of users smart building, enterprise A large group of unrelated users smart city, train station

Where is the product installed? *

Wearable device Indoors Outdoors

Development process

Select all that apply.

Development is outsourced to a third party For example, a white-label device or an external development team. The product uses open-source libraries Select if you don't know.

Who installs the product?

The user A trained person installer, technician, engineer

How long is the support period planned for? *

This usually runs until the product's end of life.

1 year 2 years 3 to 5 years More than 5 years

Ecosystem and data

Describe your product's ecosystem and data collection. Leave options unselected where they do not apply.

Applications and services

Select all that apply.

There is a mobile application There is a cloud service

Is there a web interface?

Select all that apply.

The device has a web server A web interface is generally used for administration. The web interface is in the cloud

Does the product collect personal data?

Select all that apply.

Personal data is collected and stored in the device Personal data is collected and stored in a mobile app or in the cloud

Does the product collect telematics or usage data?

Select all that apply.

Telematics or usage data is collected and stored in the device Telematics or usage data is collected and sent to the manufacturer or a third party

Device usage and functions

Describe the functions of your product. Only select an answer when the function is present.

How powerful is the device? *

Not very powerful: it can only support a few functions For example, a sensor. Reasonably powerful: it may require code optimisation For example, a microcontroller or a light bulb. Powerful: it can support multiple functions, frameworks and libraries For example, a Raspberry Pi, a camera, a TV.

Sensors and actuators

Select all that apply.

The device contains sensors For example, the device can measure the room temperature. The device can perform actions on the physical world For example, the device turns the heating on remotely.

Connectivity

Select all that apply.

The product is permanently connected to a network A local network or the Internet. The device can act as a gateway to provide network access to other devices For example, the device is an IoT hub. The user can access the device from the Internet Via a mobile app or a web interface.

How is firmware updated?

Select all that apply.

Firmware is updated remotely, over the air The device downloads and installs the update itself. Firmware is updated locally For example, via a mobile app or a USB port.

Are physical interfaces accessible to the user?

Select all that apply.

Physical interfaces are accessible outside the case For example, a USB port or an Ethernet port. Physical interfaces are accessible inside the case For example, a JTAG or debug port.

Changing an answer later recomputes the threats, the measures and the compliance at once. Your decisions and texts are kept.