Cybersecurity
i-PRO Cybersecurity Policy
Cybersecurity is fundamental to everything we design, develop, and deliver at i-PRO. As cyber threats and global regulations continue to evolve, we are committed to protecting our customers through secure-by-design products, proactive vulnerability management, transparent security practices, and continuous compliance with international cybersecurity standards and regulations. We continuously strengthen our product security capabilities and prepare our product portfolio to meet evolving global cybersecurity requirements, helping customers deploy secure, compliant, and future-ready video security solutions with confidence.
The Four Pillars of Cybersecurity
Global Compliance & Regulatory Readiness
Why customers can trust i-PRO to meet global regulations
As cybersecurity regulations continue to evolve worldwide, organizations need technology partners that can help them navigate increasingly complex compliance requirements. i-PRO proactively aligns with leading international standards, government regulations, certification programs, and procurement requirements to help customers deploy secure, compliant, and future-ready video security solutions with confidence.
The following table summarizes key cybersecurity standards, regulations, certifications, and procurement requirements, together with i-PRO's current status and ongoing initiatives.
| Key Regulations & Certifications | Category | Description | i-PRO Status (As of Sep 2026) |
|---|---|---|---|
| National Defense Authorization Act (NDAA) | Government Procurement Requirement | U.S. government procurement requirement that helping ensure products meet supply chain security expectations for federal and critical infrastructure projects. Compliance | i-PRO Products |
Compliant |
| European Union Cyber Resilience Act (CRA) | Regional Cybersecurity Regulation | European regulation introducing mandatory cybersecurity requirements throughout the entire product lifecycle for digital products placed on the EU market. | Preparing for CRA compliance across our product portfolio |
| ETSI EN 303 645 | European / International Cybersecurity Standard | International baseline standard for IoT cybersecurity, serving as the foundation for many global cybersecurity regulations and certification schemes. | Certified |
| India BIS-ER | National Cybersecurity Certification | Mandatory cybersecurity certification required for security camera products sold in India, ensuring compliance with government cybersecurity requirements. | Certified / Product-dependent |
| Japan JC-STAR | National Security Labeling Scheme | Japan's official IoT security labeling program that independently verifies and communicates the cybersecurity level of connected products. | ★1 Labeled / ★3 Planned |
| Germany BSI | National Security Labeling Scheme | German government-backed security label that demonstrates compliance with recognized cybersecurity requirements for connected products. | Planned / Under Assessment |
| Vietnam QCVN | National Cybersecurity Technical Regulation | Vietnam's national technical regulation establishing mandatory cybersecurity requirements for security camera products entering the Vietnamese market. | Planned / Under Assessment |
Secure by Design
How products are designed to resist cyber threats from the ground up
Cybersecurity starts with product design. i-PRO integrates multiple layers of protection—from hardware-based security and trusted software to secure authentication and encrypted communications—to help safeguard devices, data, and customer operations against evolving cyber threats. Our Secure by Design approach is supported by internationally recognized cybersecurity standards and certifications, including ETSI EN 303 645 and India BIS-ER, demonstrating that our products are designed to meet rigorous security requirements from the earliest stages of development.
The following table summarizes the core security technologies built into i-PRO products, showing how each technology helps protect devices, data, and communications against evolving cyber threats.
| Category | Technology | Protects Against | Description *Related resource |
|---|---|---|---|
| Trusted Device Protecting the device throughout startup and operation |
Secure Element (FIPS 140-3 Level 3 / CC EAL6+) | Key extraction | Protects cryptographic keys and security credentials in dedicated tamper-resistant hardware. |
| Secure Boot | Unauthorized software | Ensures only trusted software can run on the camera. | |
| Signed Firmware | Tampered firmware | Prevents unauthorized firmware from being installed. | |
| Identity Protection Protecting access by ensuring only trusted users and devices can gain access |
User Authentication | Unauthorized access | Ensures only authenticated users can access the device. |
| Host Authentication | Unauthorized systems | Verifies the identity of trusted systems communicating with the camera. | |
| IEEE 802.1X Network Authentication | Unauthorized network access | Authenticates devices before allowing network access. | |
| Device Certificate (GlobalSign® pre-installed) | Device impersonation | Provides every camera with a unique digital identity for secure authentication. | |
| Brute-Force Protection | Password attacks | Blocks repeated unauthorized login attempts to prevent password attacks. | |
| Data Protection Protecting sensitive data during storage and communication |
HTTPS / Secure Communication | Network interception | Encrypts communications to protect data in transit. |
| Data Encryption | Data theft | Safeguards sensitive data from unauthorized access. | |
| Alteration Detection | Recorded video & audio tampering | Verifies the integrity and authenticity of recorded MP4 video and audio files. | |
| System & Image Transmission Logs | Security auditing | Records security events and image transmission history to support monitoring, auditing, and forensic analysis. |
*Find cameras that support the cybersecurity features you need—including FIPS 140-2/140-3 Level 3, Secure Boot, IEEE 802.1X, Secure RTP, pre-installed device certificates, and signed firmware—using the i-PRO Product Selector.
compatible modelsDeployment Best Practices
Building secure products is only part of the equation. Secure deployment and configuration are equally important. Explore i-PRO's hardening guides and cybersecurity white papers for recommended security settings, deployment best practices, and practical guidance to help maximize the security of your video surveillance systems.
Learn more
Product Security Lifecycle
How i-PRO continuously protects products throughout their lifecycle
i-PRO integrates product security throughout the entire product lifecycle—from secure product development and security testing to vulnerability management, security updates, and incident response. As part of this lifecycle, i-PRO's Product Security Incident Response Team (PSIRT) continuously monitors, assesses, and responds to product security issues to help keep deployed systems secure.
Learn more about our PSIRT
Key Initiatives
- Product Development
- Vulnerability Disclosure
- Vulnerability Management
- Security Advisories
- Security Updates
- SBOM
Security Governance
How i-PRO embeds cybersecurity into our organization and development processes
Cybersecurity is embedded throughout i-PRO's organization, product development processes, and governance practices. Through structured security reviews, risk management, secure development, and cross-functional governance, we continuously strengthen product security across the entire product lifecycle to address evolving cyber threats and regulatory requirements.
Key Initiatives
- Product Security Governance
- Secure Development Lifecycle
- Security Reviews & Risk Management
- AI Governance & Responsible AI Security
Corporate Trust & Compliance
i-PRO's commitment to security extends beyond product security. Our certified management systems and compliance frameworks demonstrate our commitment to secure operations, responsible AI, and trusted global business practices.
ISO/IEC 27001 Certified
Internationally recognized Information Security Management System (ISMS).
ISO/IEC 42001 Certified
Internationally recognized Artificial Intelligence Management System (AIMS).
TAA Compliant for Made in Japan models
A U.S. government procurement requirement mandating products be manufactured or substantially transformed in designated countries.
Network and Information Security Directive 2 (NIS2)
For EU organizations, i-PRO supports Network and Information Security Directive 2 (NIS2) with secure-by-design products and cybersecurity best practices across development and the supply chain.