BSIA cybersecurity group release new code of practice for installers

Wednesday 29 July 2020 - BSIA COMMS

Press Information

The British Security Industry Association’s (BSIA) cybersecurity group have released a new code of practice for installers responsible for safety and security systems.

Installation of safety and security systems – cybersecurity code of practice, developed by the BSIA’s Cybersecurity Product Assurance Group (CySPAG), will assist in providing confidence throughout the supply chain promoting secure connection of products and services and delivering client assurance regarding connected solutions. The code of practice will assist the supply chain in its duty of care to other network users, particularly with respect to protecting the integrity of existing cybersecurity countermeasures already in place, or the implementation of such countermeasures in new solutions.

Steve Lampett, Technical Manager, BSIA, said: “We have long been concerned with the ever-increasing use of internet connected devices and systems in electronic security and how the growing links to home and business networks can leave individuals and companies vulnerable to cyberattacks.

“It is also significantly important to acknowledge that there is a combined stakeholder effort in providing a cyber secure solution, i.e. manufacturers, designers and installers working in collaboration to provide a credible cyber secure solution.

“Our new code of practice for installers takes a practical approach to address cybersecurity risks, takes the sector forward in terms of managing that risk and has the potential to become a real game changer for the industry. This will not be the end goal but should steer industry practitioners into thinking differently about how we utilise new technology in security and equip the professional security industry for the future.”

Glenn Foot, Chairman, CySPAG, said: “Unlike many cybersecurity schemes where the product is the main focus, CySPAG has taken a much broader view of and recognised that not only manufacturers of products, but the installer and client are key links to a cyber secure system. This code of practice is an industry first and leads the way in ensuring professionals with the security industry are taking all reasonable precautions when installing security equipment that has a cyber exposure.

“CySPAG has strong representation from various roles across the industry and has focused on what is practicable for installers to do and what can be expected of clients. The code of practice is the first step in a journey for this industry, and CySPAG is committed to continue to support the industry with firstly comprehensive training modules for installation companies and also a linked code of practice for manufacturers.

“The overall aim is to ensure products are produced and installed securely.”

The recommendations of this code of practice apply in addition to other standards and codes of practice relating to systems and equipment to be installed. Any documentation or checklists mentioned in this code of practice may be combined with those required by the other standards or codes of practice, applying to safety and security systems and their components but can be applied to other devices and systems.

The BSIA will also be holding a BSIA Broadcast, Cyber-attacks – reducing the risk on installations on 18 August, which will provide a forum for the industry to ask questions on the code of practice. You can register by clicking here

To download Installation of safety and security systems – cybersecurity code of practice, please visit the BSIA’s CySPAG page.

Press contact

Katherine Ingram | Public Relations & Communications Officer

[email protected] | 07764 968 196

Notes to editors

The British Security Industry Association (BSIA) is the trade association for the professional security industry in the UK.

BSIA members are responsible for more than 70% of privately provided UK security products and services (by turnover) including the

manufacture, distribution and installation of electronic and physical security equipment and the provision of security guarding and

consultancy services. Their members are industry professionals ranging in size from global companies to small and medium enterprises,

offering quality products and services to a vast spectrum of end-users.

The BSIA's Cyber Security Product Assurance Group (CySPAG) is a group of member companies from a range of industry sub-sectors who

are focused on reducing the risk of product-related cyber-crime through the increasingly interconnected nature of security systems, home

and business networks.