CySPAG Registered Manufacturers Scheme
The CySPAG Manufacturers scheme is designed to provide a higher level of confidence for integrators and end users. Showcasing security equipment and software being deployed or interacting with IT networks, is manufactured, configured, and updates are made available regularly.
Whilst it does not replace the Product Security and Telecommunications Infrastructure Act 2022 (PSTI) - a law brought in to provide basic controls for IoT connected devices - it goes beyond the requirements, asking CySPAG manufacturers to provide evidence and self-declare to a code of practice written by a wide scope of industry stakeholders.
Security Devices on your IT Network
​
The security of IT networks depends heavily on the effectiveness and configuration of the security equipment used, such as firewalls, intrusion detection/prevention systems (IDS/IPS), routers, switches, and other security appliances. However, these devices themselves can have vulnerabilities if not correctly manufactured and maintained. A few possible considerations regarding vulnerabilities in security equipment on an IT network include:
​
​​
​
​
​
​
​
​
​
​
​
​​​​
CySPAG Manufacturers is open to all BSIA members, fostering a collaborative approach to cybersecurity challenges within the sector.
​
Cyber News and Updates
The CySPAG Scheme is reviewed periodically to remain current with regards to technological updates, industry best practice, and ongoing advancements in cyber and physical security. The latest review of the CySPAG Manufacturer Scheme was: July 2025.
​
For more information or to get involved, interested parties can contact the BSIA's technical team.
​
​
​​
Supply Chain Attacks​
.png)
Security devices are often manufactured by third-party vendors, and malicious actors could exploit vulnerabilities in the supply chain. This could include backdoors in hardware or firmware that allow attackers to bypass security controls.
Legacy Equipment
.png)
Older security equipment or software that is no longer supported can have known vulnerabilities that aren't patched, because the manufacturer has discontinued updates. Using outdated equipment can leave your network exposed.
Unpatched Software or Firmware Vulnerabilities
.png){kind=small}
Security equipment often runs on specialised operating systems or firmware. If these systems, such as routers, switches, and firewalls, aren't regularly updated, they may have unpatched vulnerabilities that can be exploited by hackers.