Hikvision Cybersecurity Certifications 2025: IEC 62443, EN 18031, EN 303 645 and NIST CSF 2.0

During 2025, Hikvision added four major cybersecurity certifications: IEC 62443-4-1 for secure product development, ETSI EN 303 645 and EN 18031 for connected and wireless devices, and certification under the NIST Cybersecurity Framework 2.0. Each one was assessed by an independent body: Bureau Veritas, SGS or BSI. It's an alphabet soup, so this guide explains what each standard means in plain English, what was certified, and why it matters to anyone buying or installing CCTV.

Hikvision's 2025 certifications at a glance

• February 2025: IEC 62443-4-1, for Hikvision's secure product development lifecycle.
• April 2025: ETSI EN 303 645 and EN 18031, awarded by Bureau Veritas.
• July 2025: EN 18031 for multiple products, assessed by SGS and recognised by an EU Notified Body.
• October 2025: NIST CSF 2.0, audited by the British Standards Institution (BSI). Hikvision says it was among the first companies worldwide to achieve it.

What each standard means

IEC 62443-4-1: building security in from the start

IEC 62443 is the international family of standards for industrial automation and control systems. Part 4-1 covers how products are developed: identifying security requirements, assessing risk, designing securely and verifying security before release. It doesn't certify one camera. It certifies the process used to make them. Hikvision calls its process the Hikvision Secure Development Life Cycle (HSDLC). The standard also maps closely to requirements in the EU's NIS2 Directive.

ETSI EN 303 645: the baseline for connected devices

This European standard sets the minimum security a consumer internet-connected device should have, such as no universal default passwords, a way to report vulnerabilities, secure updates and protection of personal data. It sits behind the UK's PSTI rules for connectable consumer products, which Hikvision says it complies with.

EN 18031: security for wireless kit

EN 18031 sets security requirements for radio equipment, which covers anything with Wi-Fi, 4G or Bluetooth, such as wireless cameras. It's linked to the EU Radio Equipment Directive and is now required for CE marking of wireless products sold in the EU. The standard focuses on protecting the network, user privacy and financial assets, and on closing known exploitable weaknesses.

NIST CSF 2.0: security across the whole organisation

The NIST Cybersecurity Framework, from the US National Institute of Standards and Technology, is widely used to manage cyber risk. Version 2.0 has six functions: Govern, Identify, Protect, Detect, Respond and Recover. The big change from version 1.1 is that "Govern" is now a core function, including supply-chain and third-party risk. Certification shows how a company is run, not just how its products are built.

Why this matters when you choose CCTV

• Independent proof. Each certificate was assessed by a third party, not just claimed by the manufacturer.
• Compliance paperwork. IT teams, insurers and tender documents increasingly ask which standards a product meets. Named standards make that answer easy.
• Wireless confidence. EN 18031 matters for Wi-Fi and 4G cameras, which connect over radio and are a common target.
• Lifecycle security. Secure development and vulnerability handling mean security continues after the product is installed, through firmware updates.

Hikvision also lists ISO/IEC 27001, 27701, 27017 and 29151 among more than 25 security and compliance certifications. In 2026 its DeepinView cameras gained EUCC certification, and it published its 2026 Cybersecurity White Paper.

Certificates don't replace good set-up

The installation still matters as much as the badge on the box. Set strong, unique passwords, keep firmware up to date (see our firmware guide), avoid port forwarding, and keep cameras on their own network with a managed switch. Our technical support team can help.

Our take

Four independent certifications in a year shows a clear focus on cyber compliance, especially with the EU's Cyber Resilience Act, NIS2 and the radio equipment rules all tightening. For buyers, the practical value is simple: when someone asks "is it secure, and how do you know?", there's now a named standard and an independent assessor to point to.

Questions about cyber compliance for a CCTV project? Call 01902 902251. As an authorised Hikvision partner, we ship nationally to England, Scotland and Wales.

Quick questions

What is EN 18031?
A European cybersecurity standard for radio equipment such as Wi-Fi and 4G devices, linked to CE marking under the EU Radio Equipment Directive.

What is ETSI EN 303 645?
The European baseline security standard for consumer IoT devices, covering things like default passwords, updates and vulnerability reporting.

What does IEC 62443-4-1 certify?
A company's secure product development process, from requirements and risk assessment through design and testing.

What is NIST CSF 2.0?
A cybersecurity framework with six functions (Govern, Identify, Protect, Detect, Respond, Recover) for managing cyber risk across an organisation.

Sources: Hikvision UK newsroom, 24 February 2025, 17 April 2025, 17 July 2025 and 20 October 2025.