MDSCert Certification for IoT Devices and Platforms

GSMA MDSCert Certification for Mobile & Connected Consumer Devices

As smartphones, tablets, wearables, and other connected consumer devices become increasingly connected and software-driven, demonstrating product security has become a business requirement. Mobile network operators, enterprise customers, regulators, and consumers increasingly expect manufacturers to provide independent evidence that devices have been designed and tested against recognized cybersecurity requirements.

At the same time, manufacturers face growing pressure to deliver new products quickly while managing increasingly complex hardware, firmware, operating systems, and pre-installed software. Demonstrating consistent security across this technology stack requires a structured and internationally recognized evaluation approach.

GSMA MDSCert addresses this challenge by providing a standardized security baseline for connected consumer devices. Built on ETSI TS 103 732, the scheme enables manufacturers to demonstrate that their products have been independently evaluated against defined security requirements using a consistent and comparable methodology.

MDSCert certification provides an internationally recognized way to demonstrate the security of mobile and connected consumer devices while strengthening customer confidence and supporting market adoption.

With MDSCert certification, organizations can:

• Demonstrate independently verified device security
• Meet increasing customer and industry security expectations
• Build confidence among mobile operators, enterprise customers, and consumers
• Differentiate products in competitive global markets
• Strengthen market access through an internationally recognized certification scheme

How Bureau Veritas Supports Your MDSCert Journey

Achieving certification requires more than technical testing alone. Our cybersecurity experts support you throughout the complete certification process, from preparation to certification.

• MDSCert Readiness Assessment
  We assess your device, documentation, and development processes against ETSI TS 103 732 and GSMA requirements, identifying gaps early and helping you prepare efficiently for evaluation.
   
• Security Evaluation and Testing
  Our specialists perform functional testing, software analysis, vulnerability assessment, and penetration testing aligned with the selected Security Assurance Level.
   
• Documentation and Evidence Support
  We help prepare the technical evidence required for certification, including security documentation, architecture descriptions, software update information, and supporting evaluation evidence.
   
• Certification Guidance
  We guide you throughout the certification process, supporting remediation activities, coordination with the certification scheme, and submission to the certification body.

MDSCert Security Assurance Levels

MDSCert defines three Security Assurance Levels (SAL1–SAL3), allowing manufacturers to select the level of evaluation that best matches their product, market expectations, and business objectives.

Most commercial devices pursue SAL2 or SAL3, combining independent laboratory testing with increasingly rigorous security analysis and penetration testing.

Choosing the appropriate assurance level and preparing the required evidence can be challenging. Bureau Veritas helps manufacturers navigate the MDSCert process efficiently and confidently.

MDSCert or Common Criteria?

Both MDSCert and Common Criteria provide independent security assurance, but they serve different purposes.

MDSCert is specifically designed for smartphones, tablets, wearables, and connected consumer devices, providing a standardized security baseline aligned with GSMA requirements.

Common Criteria provides a broader international evaluation framework for a wide range of IT, IoT, and OT products, supporting security assurance across many technology domains.

Bureau Veritas supports both certification schemes and can help determine the most appropriate certification strategy based on your product, target markets, and customer requirements.

Learn more about our Common Criteria certification services.

Your Partner for MDSCert Certification

Bureau Veritas combines deep cybersecurity expertise with extensive experience in product security evaluations to help manufacturers bring secure connected devices to market with confidence.

• Global expertise in mobile security, IoT, and connected consumer devices
• Accredited laboratories and experienced security evaluators
• Proven experience with Common Criteria, ETSI EN 303 645, BSPA, and other internationally recognized security schemes
• End-to-end support throughout the complete certification lifecycle
• Efficient evaluation processes designed to reduce certification timelines
• Global recognition and trust as part of the Bureau Veritas Group