Thailand’s dSure certification sets voluntary cybersecurity standards for IP cameras and IoT devices—impacting procurement, digital policy, and local tech competitiveness.
Thailand was an early adopter of cybersecurity regulations when it issued one of Asia’s first dedicated certification scheme for IP cameras. The information ministry-affiliated Digital Economy Promotion Agency (DEPA) introduced the dSure label in mid-2022, long before Thailand’s regional peers Vietnam and India, for example, introduced sweeping regulations that still see manufacturers scrambling to comply and get certified.
Thailand’s softer approach with the dSure label flies under the radar in this regard, not just because it is voluntary and doesn’t seek to push noncompliant companies out of the market. Its effects on Thailand’s IoT landscape are nonetheless tangible, and its importance is likely to increase going forward.
It also comes at a time when the Thai government is pursuing a new national strategy to transform the country from a manufacturing-based to an innovation-driven economy and reach high-income status by 2037. Smart technologies like IoT are a central pillar of the plan, as explored in
this article last month.
How does dSure compare within Asia?
| |
Thailand's dSure label |
Vietnam's directive QCVN 135: 2024/BTTTT |
India's STQC Certification Scheme |
| Regulatory approach |
Voluntary, incentive-based label |
Mandatory from Jan. 1, 2026 |
Mandatory for IP cameras in public infrastructure and critical sectors |
| Noncompliance result |
No penalties; revocation of label possible |
Confiscation of non‑compliant devices upon import; potential revocation of import and distribution permits |
Sale and import bans |
| Enforcement Authority |
DEPA (sub-ministry-level economic promotion agency) |
Ministry of Public Security (administration of the National Police) |
Ministry of Electronics and Information Technology |
| Motivation |
Increasing trust in locally certified products |
National Security; blocking imports of “cyber-insecure” cameras, mostly affecting Chinese-made devices |
Raising cybersecurity standards; “Make in India” industrial policy |
What is dSure and how to get it?
The dSure label certifies that a product complies with three sets of rules:
- National safety standard such as TIS 1561-2556 and IEC 60950/62368. The focus is on fire safety, safe electric wiring, etc.
- Functionality according to the devices’ most important specs, such as a minimum resolution of 1280×720 pixels, a minimum frame rate of 25 fps, compliance with ONVIF Profile S
- Cybersecurity, such as no default passwords, encrypted transmission, secure storage
The overall bar set by dSure is only moderately high and refers to internationally established standards. The cybersecurity part is, for example, taken directly from the OWASP IoT Top 10 and OWASP Mobile Top 10 criteria. Many cameras in the market, including models from China’s top brands that might be pushed out of India and Vietnam, fulfill the criteria.
The certification process takes about 30 days, as stated by DEPA, and involves testing in an accredited lab. One special hurdle that international companies face is that the dSure application has to be filed in Thai—as is usual in dealings with government-affiliated bodies in the country, giving rise to a whole sector of local consultancies and accountants helping international brands.
The main aim in introducing the label was likely not to effect significantly better cybersecurity in Thailand’s IoT landscape, but to offer local manufacturers a chance to obtain a trusted certificate.
Applying for dSure costs companies THB 100,000 (about US$2,800) per device line—which is a fraction of the cost companies would have to invest to obtain the international ISO 27001 certification, which also involves a half-year-long audit.
Who has it?
Thai makers of IP cameras, such as Hi View, FIRES and JARTON, have been certified under the dSure scheme, while many global brands that easily fulfill the criteria have apparently not applied. This includes manufacturers with significant footprints in Thailand.
The official list of certified devices and brands shows no products from, for example, Avigilon, Axis, Bosch, Dahua, Hanwha or Hikvision.
Further expansion likely
The dSure program began as a relatively quiet initiative focused specifically on IP cameras—a device category plagued by low-cost imports and growing security concerns. In 2023, however, DEPA stated its intention to turn dSure into an umbrella certification for IoT devices of all categories, including smart sensors, industrial controls, agriculture devices and embedded systems.
The latest update came in June 2024, when DEPA introduced different functionality criteria for different IoT device categories. Alongside this expansion, dSure was integrated into the Thailand Digital Catalog, a procurement platform used by public agencies to shortlist trusted products.
In the long term, and especially if Thailand continues to increase the scope and reach of the label, dSure could turn into a virtual must-have in the IoT field. Companies bidding on publicly funded smart city projects could receive preferential treatment if they use dSure-certified IoT products. This might include fast-tracking or other advantages in the selection process.
The Thai IoT Association, an industry lobby group, has suggested
such a scheme.
This would give dSure-certified companies the edge in a contested market, and big international brands would feel the need to file applications as well. Having an eye on the development of dSure, and the wider regulatory landscape in Thailand, should already be a must for them.