As an independent third-party testing and certification organization, the TÜV SÜD team have expertise in data regulations and product cybersecurity in specific markets, as well as a deep understanding in the field of cyber threats. The TÜV SÜD team of experts cooperate with customers around the world to fully realize their digital operations.

Data protection assessment service

• EU-General Data Protection Regulation (GDPR) Compliance Service

• Personal Information Protection Law (PIPL) Compliance Service

• Supply Chain Information Security Audit

• Data Protection Impact Assessment (DPIA)

• Cyber Security Law (CN-CSL) compliance services

• Data Security Law (CN-DSL) Data exit security assessment

• External Data Protection Officer Service/ Data Protection Coordinator

• Service Organisation Control (SOC) Reporting Service

Testing

• Web & Application Penetration testing (OWASP/CWE)

• Consumer IoT Products Penetration testing (OWASP)

• Medical Devices Penetration Testing

• IoV (Internet of Vehicle) Penetration Testing

• Infrastructure Penetration Testing

• Mobile Application Security Analysis

• End Point Security Analysis

• Simulated Phishing Email Attack Service

• Industrial Control Equipment Penetration Testing

• Intelligence Lift System Penetration Testing

• Battery Energy Storage System Penetration Testing

Automotive cybersecurity

• Automotive cybersecurity management system assessment (CSMS certification and ISO/SAE 21434 process and product certification)

Railway applications cybersecurity

• Provide IEC 62443 and TS 50701 assessment for asset owners, service providers, and product integrators (including Signaling and Rolling Stock)

Consumer IoT products market access

For the consumer IoT products market, some countries have issued relevant mandatory laws and regulations on cybersecurity, and some regulations have been included as part of mandatory certification. TÜV SÜD provides customers with the following cybersecurity compliance services in regional markets such as:

• Brazil cybersecurity assessment

• India cybersecurity assessment

• Japanese market access certification

• Singapore market access certification

• UK market access assessment

• EU market access assessment

• North America cybersecurity assessment

• Latin America cybersecurity assessment

Industrial cybersecurity

• Industrial communication networks security: IEC 62443

• Smart Industry Readiness Index Assessment

• Risk assessment based on machinery regulation

• Energy smart appliances –Demand side response operation – Code of practice

• Distributed Energy Resources – Cyber Security Connection Guidance Training and Assessment

• Industrial cyber security training, gap analysis

• Cybersecurity Assessment Related to the Functional Safety Lifecycle

My German Pavilion