Ensuring the security of UK Smart Metering
All Manufacturers producing smart metering Devices as defined in the Smart Energy Code for the UK market are required to obtain certification under the Commercial Product Assurance (CPA) scheme.
CyTAL has been supporting the development and maintenance of the Commercial Product Assurance (CPA) scheme for many years, whilst also operating as a CPA Test Lab.
In early 2025, the role of CPA Scheme Operator will start to transition from the National Cyber Security Centre (NCSC) to CyTAL.
What does this mean for Manufacturers and CPA Test Labs?
- CyTAL is no longer taking on new CPA evaluations (as a CPA Test Lab).
- If you are a Manufacturer seeking a new CPA evaluation, the approved CPA Test Labs you can use are: NCC Group or KPMG.
- As CPA Scheme Operator, CyTAL will be responsible for reviewing the outputs from CPA Test Labs, and issuing CPA certificates for publication by the Security Sub-Committee (SSC), via the SEC website.
- CyTAL is now preparing to accept new CPA applications/enquiries from around mid-January 2025, pending an outcome on the DESNZ consultation here on the Transitional Approach Document v2, which closes on 8 January 2025.
- As the current CPA Scheme Operator, NCSC will continue to accept new CPA evaluations and support in-flight evaluations until the above transition is complete. For more details click here:
- The above transition is expected to be fully complete by April 2025.
Products that must be ‘CPA certified’ are as follows:
- Gas Smart Metering Equipment (GSME)
- Electricity Smart Metering Equipment (ESME)
- Smart Metering Communications Hub (CH)
- Standalone Auxiliary Proportional Controllers (SAPC)
- HAN Controlled Auxiliary Load Control Switches (HCALCS)
For information on the specific CPA Security Characteristics each of the above product’s type needs to meet, visit here
For a list of CPA certified products, see here
Please see the NCSC website for more information on the CPA process:
https://www.ncsc.gov.uk/information/commercial-product-assurance-cpa
If you’re looking for a CPA evaluation, contact us today.
UKAS
CyTAL is a UKAS accredited testing laboratory No. 9334, from which we perform Commercial Product Assurance (CPA) evaluations according to the NCSC Process for Performing CPA Foundation Grade Evaluations.
Click here for our schedule of accreditation
