The present document specifies high-level provisions for the security of consumer devices that are connected to network infrastructure, such as the Internet or home network, and their associated services. A non-exhaustive list of examples include:

1. connected children's toys and baby monitors;
2. connected safety-relevant products such as smoke detectors and door locks;
3. smart cameras, TVs and speakers;
4. wearable health trackers;
5. connected home automation and alarm systems;
6. connected appliances (e.g. washing machines, fridges); and
7. smart home assistants.

The present document provides basic guidance for organizations involved in the development and manufacturing of consumer IoT on how to implement those provisions.