Ensuring the security of UK Smart Metering
All Manufacturers producing smart metering Devices as defined in the Smart Energy Code (SEC) for the UK market are required to obtain certification under the Commercial Product Assurance (CPA) scheme. CyTAL has been supporting the development and maintenance of the Commercial Product Assurance (CPA) scheme for many years as a CPA Test Lab.
As of March 2025 CyTAL has taken on the role of CPA Scheme Operator, following recent changes to the SEC.
What does this mean for Manufacturers and CPA Test Labs?
- CyTAL is no longer a CPA Test Lab
- For Manufacturers seeking a new CPA evaluation, the approved CPA Test Labs you can use are: NCC Group or KPMG
- As CPA Scheme Operator, CyTAL is responsible for reviewing the findings of approved CPA Test Labs, and issuing CPA certificates for approval and publication by the Security Sub-Committee (SSC)
- CyTAL is now accepting new CPA enquiries – click here and select the CPA option from the drop-down list
- Alternatively please email us at: CPA.enquiries@cytal.co.uk
Products that must be ‘CPA certified’ are as follows:
- Gas Smart Metering Equipment (GSME)
- Electricity Smart Metering Equipment (ESME)
- Smart Metering Communications Hub (CH)
- Standalone Auxiliary Proportional Controllers (SAPC)
- HAN Controlled Auxiliary Load Control Switches (HCALCS)
For information on the specific CPA Security Characteristics each of the above product’s type needs to meet, visit here
For a list of CPA certified products, see here
For more details on the Commercial Product Assurance scheme, please visit the SEC website here: