If your smart cameras, industrial routers, smart home devices, or energy storage equipment are planned for export to Japan, please note: Starting from 2025, Japan has officially implemented JC-STAR (Japan Cybersecurity Technology Assessment Requirements), a certification system for the cybersecurity conformity assessment and labeling of IoT devices. Supervised by Japan's Ministry of Economy, Trade and Industry (METI) and administered by the Information-technology Promotion Agency (IPA), this certification system is not only a safety standard but also a "mandatory credential" for entering Japan's government procurement, critical infrastructure, and high-end markets.

I. What is JC-STAR?

JC-STAR is a cybersecurity certification and labeling system for IoT devices, covering smart home products, industrial equipment, energy storage systems, and other related products. Its key features include:

• Official Background: Supervised by the Ministry of Economy, Trade and Industry (METI) and certified by the Information-technology Promotion Agency (IPA).

• Label Grading: Certified products can obtain 1 to 4-star security labels. Specifically, STAR-1 and STAR-2 labels can be awarded through self-declaration, while STAR-3 and STAR-4 labels require evaluation after third-party laboratory testing <superscript>2.

• Legal Basis: Based on the Information Processing Promotion Act, aiming to enhance the security and reliability of IoT devices.

For manufacturers, the JC-STAR label represents official recognition of product security capabilities and serves as an important screening criterion in Japan's procurement market.

II. Why Did Japan Launch JC-STAR?

1. Address Security Threats: With the rapid surge in the number of IoT devices, products such as energy storage systems and smart home devices are facing escalating cybersecurity risks.

2. Unify Procurement Standards: Critical sectors including government, power, and water utilities require clear security assessment criteria for procurement.

3. Align with International Standards: On the basis of localization in Japan, it incorporates requirements from international standards such as the EU's ETSI EN 303 645 and the UK's PSTI.

III. How Does JC-STAR Differ from International Standards?

JC-STAR is aligned with international standards like ETSI EN 303 645 and UK PSTI but features distinct Japanese localization characteristics:

• JC-STAR: An official Japanese label with clear grading, strongly linked to government procurement, covering consumer IoT, industrial equipment, and energy storage products.

• ETSI EN 303 645: A European baseline for consumer IoT security; the STAR-1 level of JC-STAR already covers its core requirements.

• UK PSTI: A mandatory regulation in the UK; JC-STAR's requirements fully cover and exceed its basic provisions.

Value for manufacturers: If products already meet ETSI or PSTI requirements, most of the compliance preparation for JC-STAR (especially STAR-1) is already completed. This certification helps manufacturers convert international compliance into a competitive advantage in the Japanese market.

IV. Impact on Manufacturers: Challenges and Opportunities Coexist

Challenges

Need to invest resources in security assessment, possibly adjust product design and software development processes, and bear certification costs.

Opportunities

1. Market Access: A key criterion for entering the procurement lists of Japan's government and critical infrastructure (e.g., power systems, energy storage systems).

2. Brand Enhancement: The certification label enhances product competitiveness, helping products stand out in the high-end market.

3. Forward-Looking Layout: Conforms to the global trend of IoT security regulation, accumulating experience for expanding into other markets.

V. How to Start Preparing for JC-STAR Certification?

1. Confirm Product Scope: Verify whether your products (e.g., network cameras, industrial routers, energy storage devices, smart home gateways) fall within the certification scope. JC-STAR applies to IoT devices that send and receive data via the Internet using IP, as well as IoT devices indirectly connected to the Internet <superscript>2.

2. Evaluate Target Grade: Determine the required label grade based on market needs (STAR-1 as the basic level, STAR-3/4 for high-end procurement).

3. Seek Professional Support: Consult institutions familiar with JC-STAR to conduct gap analysis and plan the certification roadmap.

JC-STAR marks the entry of Japan's IoT and energy storage markets into the "security certification" era. For manufacturers, early preparation is not only a compliance requirement but also a strategic choice to gain market trust and seize the initiative.

To learn more about certification details or the latest updates, welcome to consult the cybersecurity expert team of Energy Storage Testing!