--- title: "UK PSTI vs Australia Cyber Security Act Guide" canonical_url: "https://www.sorena.io/artifacts/uk/product-security-and-telecommunications-infrastructure-act/psti-vs-australia-cyber-security-act" source_url: "https://www.sorena.io/artifacts/uk/product-security-and-telecommunications-infrastructure-act/psti-vs-australia-cyber-security-act" author: "Sorena AI" description: "UK PSTI Product Security guidance for PSTI vs Australia Cyber Security Act, with practical decisions, evidence, edge cases, and external source citations." published_at: "2026-05-09" updated_at: "2026-05-09" keywords: - "UK PSTI Product Security" - "PSTI vs Australia Cyber Security Act" - "UK PSTI Product Security PSTI vs Australia Cyber Security Act" - "compliance checklist" - "practical guidance" - "Compliance" - "Regulatory guidance" --- **[SORENA](https://www.sorena.io/)** - AI-Powered GRC Platform [Home](https://www.sorena.io/) | [Solutions](https://www.sorena.io/solutions) | [Artifacts](https://www.sorena.io/artifacts) | [About Us](https://www.sorena.io/about-us) | [Contact](https://www.sorena.io/contact) | [Portal](https://app.sorena.io) --- # UK PSTI vs Australia Cyber Security Act Guide UK PSTI Product Security guidance for PSTI vs Australia Cyber Security Act, with practical decisions, evidence, edge cases, and external source citations. *Artifact Guide* *UK* *PSTI vs Australia Cyber Security Act* ## UK PSTI Product Security PSTI vs Australia Cyber Security Act PSTI vs Australia Cyber Security Act decisions under UK PSTI Product Security should be written in operational language: who is in scope, what must happen, what evidence proves it, and when escalation is needed. Use this guide to turn official requirements into scope, evidence, owner, and review decisions. This guidance is practical, source-linked, and should be validated against current legal and policy requirements before implementation. Compare the UK PSTI regime with the Australia Cyber Security Act to decide which facts belong to each regime, which team owns the work, what evidence should be kept, and when a separate review or escalation is needed. ## PSTI vs Australia Cyber Security Act: practical compliance comparison Compare PSTI and Australia Cyber Security Act through scope, actors, triggers, duties, evidence, deadlines, enforcement, and operational decision rules. - **PSTI**: PSTI is the primary scoping column: use it to confirm covered facts, accountable owners, mandatory artifacts, timing, and enforcement exposure before assigning implementation work. - **Australia Cyber Security Act**: Australia Cyber Security Act is the second workstream in this comparison. Use it to test where the comparator has different scope, owners, triggers, evidence, timing, enforcement, and reuse limits from PSTI. | Dimension | PSTI | Australia Cyber Security Act | Operational implication | Sources | | --- | --- | --- | --- | --- | | Scope and covered activity | PSTI: define the exact products, services, processing, claims, entities, assets, or activities that bring this side into scope; record out-of-scope facts separately. | Australia Cyber Security Act: test its own scope boundary, exclusions, and covered activity; do not copy the PSTI conclusion without a separate source-linked finding. | Write two scope findings first so the team can see which products and facts belong to PSTI, which belong to Australia Cyber Security Act, and which facts need a separate source-linked review before work starts. | [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties.
[Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products.
[Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations.
[Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations.
[Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - UK OPSS guidance explains regulatory activities and enforcement resources for consumer connectable products, anchoring the PSTI side of the comparison.
[Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. | | Who must act | PSTI: identify the manufacturer, importer, distributor, authorised representative, or UK responsible person that owns the connected-product duty. | Australia Cyber Security Act: identify the regulated entity for the relevant duty, such as a reporting business entity, smart-device supplier, ransomware-reporting entity, or critical-infrastructure responsible entity under the separate SOCI framework. | Name each role separately because one company can be a manufacturer, importer, distributor, or other regulated entity in different workstreams, and each role can carry its own evidence and review step. | [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties.
[Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products.
[Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations.
[Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations.
[Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products.
[Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. | | Trigger or threshold | PSTI: state the fact that starts the obligation, such as market placement, processing, designation, incident, reporting period, transfer, data request, supplier change, or public claim. | Australia Cyber Security Act is triggered only by the facts named in its source, such as thresholds, regulated status, risk tier, designation, incident, market placement, certification need, or supervisory notice. | Start with the trigger so teams do not apply the wrong regime to the wrong facts. | [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties.
[Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products.
[Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations.
[Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations.
[Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products.
[Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. | | Core obligations | The UK PSTI Act requires manufacturers of connectable products to ban universal default passwords, publish a vulnerability disclosure policy with a named contact point, and declare the minimum security update support period before selling the product in the UK. | The Australia Cyber Security Act requires manufacturers of smart devices sold in Australia to meet minimum cyber security standards set by the government, notify the Cyber and Infrastructure Security Centre of reportable cyber incidents, and implement a voluntary cyber security framework for critical infrastructure operators. | Convert each obligation into a separate action item, such as a ticket, notice, record, control, or contract clause, so the team can show exactly how compliance will be done. | [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties.
[Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products.
[Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations.
[Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations.
[Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products.
[Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. | | Evidence and records | PSTI: keep the evidence that proves this side of the decision, including cited text, registers, policies, test records, contracts, notices, reports, approvals, or audit artifacts. | Australia Cyber Security Act: keep comparator evidence in a distinct record set and link only the artifacts that genuinely satisfy both source-linked requirements. | Keep source links, factual analysis, owner approval, and implementation evidence together. | [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties.
[Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products.
[Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations.
[Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations.
[Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products.
[Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. | | Timing and cadence | PSTI: capture the application date, commencement date, transition period, reporting clock, review cadence, remediation window, or certification renewal that controls this side. | Australia Cyber Security Act: track the comparator schedule separately so a later deadline, recurring audit, or incident timer is not hidden by the other workstream. | Use current source dates; do not reuse old project plans after amendments or guidance updates. | [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties.
[Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products.
[Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations.
[Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations.
[Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products.
[Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. | | Enforcement or assurance route | PSTI: identify the competent authority, regulator, assessor, customer audit, certification body, contractual remedy, penalty, or supervisory process tied to this side. | Australia Cyber Security Act: identify the comparator enforcement or assurance route and record where supervision, penalties, market access, certification, or contract leverage differs. | Escalate when enforcement routes differ because a regulator, market-surveillance authority, certification body, customer, or contract counterparty may require different proof. | [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties.
[Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products.
[Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations.
[Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations.
[Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products.
[Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. | | Overlap and reuse | PSTI: reuse controls only where the source-linked duty, evidence standard, owner, and timing align with the comparator; otherwise keep a bridge note. | Australia Cyber Security Act can reuse evidence from the other side only when the same fact pattern, system boundary, control, owner, and source-linked requirement are genuinely aligned. | Document overlap explicitly instead of merging both tests into one vague compliance label. | [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties.
[Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products.
[Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations.
[Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations.
[Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products.
[Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. | | Practical decision rule | PSTI: treat this as the controlling workstream when its scope trigger, deadline, regulator, or required artifact is the immediate blocker. | Australia Cyber Security Act: run a parallel or follow-on workstream when this side adds separate actors, evidence, timing, penalties, customer assurances, or implementation constraints. | If the product is a UK consumer connectable product, treat PSTI as the default starting point; if the Australian law adds a separate duty, run Australia Cyber Security Act in parallel and escalate when the same product, evidence set, or control would need to satisfy both regimes. | [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties.
[Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products.
[Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations.
[Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations.
[Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products.
[Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. | Sources for Scope and covered activity - PSTI: - [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties. - Quote: "Product Security and Telecommunications Infrastructure Act 2022" - [Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products. - Quote: "security requirements for relevant connectable products" Sources for Scope and covered activity - Australia Cyber Security Act: - [Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations. - Quote: "Cyber Security Act 2024" - [Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations. - Quote: "Security of Critical Infrastructure Act 2018" Sources for Scope and covered activity - operational implication: - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - UK OPSS guidance explains regulatory activities and enforcement resources for consumer connectable products, anchoring the PSTI side of the comparison. - Quote: "This document provides guidance on regulatory activities, enforcement, and related resources for the Product Security and Telecommunications Infrastructure" - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "The government has been working with the tech industry to better secure consumer connectable products for several years" Sources for Who must act - PSTI: - [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties. - Quote: "Product Security and Telecommunications Infrastructure Act 2022" - [Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products. - Quote: "security requirements for relevant connectable products" Sources for Who must act - Australia Cyber Security Act: - [Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations. - Quote: "Cyber Security Act 2024" - [Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations. - Quote: "Security of Critical Infrastructure Act 2018" Sources for Who must act - operational implication: - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "This document provides guidance on regulatory activities, enforcement, and related resources for the Product Security and Telecommunications Infrastructure" - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "The government has been working with the tech industry to better secure consumer connectable products for several years" Sources for Trigger or threshold - PSTI: - [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties. - Quote: "Product Security and Telecommunications Infrastructure Act 2022" - [Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products. - Quote: "security requirements for relevant connectable products" Sources for Trigger or threshold - Australia Cyber Security Act: - [Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations. - Quote: "Cyber Security Act 2024" - [Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations. - Quote: "Security of Critical Infrastructure Act 2018" Sources for Trigger or threshold - operational implication: - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "This document provides guidance on regulatory activities, enforcement, and related resources for the Product Security and Telecommunications Infrastructure" - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "The government has been working with the tech industry to better secure consumer connectable products for several years" Sources for Core obligations - PSTI: - [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties. - Quote: "Product Security and Telecommunications Infrastructure Act 2022" - [Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products. - Quote: "security requirements for relevant connectable products" Sources for Core obligations - Australia Cyber Security Act: - [Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations. - Quote: "Cyber Security Act 2024" - [Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations. - Quote: "Security of Critical Infrastructure Act 2018" Sources for Core obligations - operational implication: - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "This document provides guidance on regulatory activities, enforcement, and related resources for the Product Security and Telecommunications Infrastructure" - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "The government has been working with the tech industry to better secure consumer connectable products for several years" Sources for Evidence and records - PSTI: - [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties. - Quote: "Product Security and Telecommunications Infrastructure Act 2022" - [Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products. - Quote: "security requirements for relevant connectable products" Sources for Evidence and records - Australia Cyber Security Act: - [Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations. - Quote: "Cyber Security Act 2024" - [Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations. - Quote: "Security of Critical Infrastructure Act 2018" Sources for Evidence and records - operational implication: - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "This document provides guidance on regulatory activities, enforcement, and related resources for the Product Security and Telecommunications Infrastructure" - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "The government has been working with the tech industry to better secure consumer connectable products for several years" Sources for Timing and cadence - PSTI: - [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties. - Quote: "Product Security and Telecommunications Infrastructure Act 2022" - [Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products. - Quote: "security requirements for relevant connectable products" Sources for Timing and cadence - Australia Cyber Security Act: - [Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations. - Quote: "Cyber Security Act 2024" - [Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations. - Quote: "Security of Critical Infrastructure Act 2018" Sources for Timing and cadence - operational implication: - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "This document provides guidance on regulatory activities, enforcement, and related resources for the Product Security and Telecommunications Infrastructure" - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "The government has been working with the tech industry to better secure consumer connectable products for several years" Sources for Enforcement or assurance route - PSTI: - [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties. - Quote: "Product Security and Telecommunications Infrastructure Act 2022" - [Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products. - Quote: "security requirements for relevant connectable products" Sources for Enforcement or assurance route - Australia Cyber Security Act: - [Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations. - Quote: "Cyber Security Act 2024" - [Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations. - Quote: "Security of Critical Infrastructure Act 2018" Sources for Enforcement or assurance route - operational implication: - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "This document provides guidance on regulatory activities, enforcement, and related resources for the Product Security and Telecommunications Infrastructure" - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "The government has been working with the tech industry to better secure consumer connectable products for several years" Sources for Overlap and reuse - PSTI: - [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties. - Quote: "Product Security and Telecommunications Infrastructure Act 2022" - [Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products. - Quote: "security requirements for relevant connectable products" Sources for Overlap and reuse - Australia Cyber Security Act: - [Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations. - Quote: "Cyber Security Act 2024" - [Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations. - Quote: "Security of Critical Infrastructure Act 2018" Sources for Overlap and reuse - operational implication: - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "This document provides guidance on regulatory activities, enforcement, and related resources for the Product Security and Telecommunications Infrastructure" - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "The government has been working with the tech industry to better secure consumer connectable products for several years" Sources for Practical decision rule - PSTI: - [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties. - Quote: "Product Security and Telecommunications Infrastructure Act 2022" - [Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products. - Quote: "security requirements for relevant connectable products" Sources for Practical decision rule - Australia Cyber Security Act: - [Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations. - Quote: "Cyber Security Act 2024" - [Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations. - Quote: "Security of Critical Infrastructure Act 2018" Sources for Practical decision rule - operational implication: - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "This document provides guidance on regulatory activities, enforcement, and related resources for the Product Security and Telecommunications Infrastructure" - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - This source supports the operational comparison by showing how UK PSTI product-security obligations are implemented and enforced for consumer connectable products. - Quote: "The government has been working with the tech industry to better secure consumer connectable products for several years" ### How to use the PSTI vs Australia Cyber Security Act comparison - If the product is a UK consumer connectable product, start with PSTI and use the Australia Cyber Security Act only to check for a separate comparator duty. - If the Australian facts create a separate regulated duty, keep the Australia Cyber Security Act workstream open in parallel and do not merge the evidence set. - Escalate overlap cases where both regimes can apply to the same data flow, product, service, or contract and one control cannot be shown to satisfy both source-linked requirements. Sources for the practical decision rule: - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - Supports the comparison decision rule. - Quote: "This document provides guidance on regulatory activities, enforcement, and related resources for the Product Security and Telecommunications Infrastructure" - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - Supports the comparison decision rule. - Quote: "The government has been working with the tech industry to better secure consumer connectable products for several years" - [THE PRODUCT SECURITY AND TELECOMMUNICATIONS INFRASTRUCTURE (SECURITY REQUIREMENTS FOR RELEVANT CONNECTABLE PRODUCTS) REGULATIONS 2023](https://www.legislation.gov.uk/uksi/2023/1007/pdfs/uksiem_20231007_en_001.pdf?ref=sorena.io) - Supports the comparison decision rule. - Quote: "security requirements for relevant connectable products" - [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties. - Quote: "Product Security and Telecommunications Infrastructure Act 2022" - [Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products. - Quote: "security requirements for relevant connectable products" - [Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations. - Quote: "Cyber Security Act 2024" ## How should teams compare PSTI vs Australia Cyber Security Act under UK PSTI Product Security? Start by deciding whether the product is a relevant connectable product and which manufacturer, importer, distributor, statement-of-compliance, vulnerability-disclosure, password, support-period, or OPSS enforcement duty is triggered. The useful answer should name the exact trigger, affected product or process, required action, owner, evidence, and escalation point. Keep the legal source, product-scope decision, manufacturer/importer/distributor role, statement of compliance, and technical evidence together so OPSS-facing records are reviewable. - Define the exact PSTI vs Australia Cyber Security Act trigger and the business process it affects. - Record which role, product, system, customer group, or data flow is in scope. - Attach the source-linked rule, the owner, and the evidence field before approving the control. - Escalate uncertainty when the facts depend on thresholds, exemptions, cross-border activity, vulnerable users, or enforcement-sensitive wording. Sources for this answer: - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - Primary source support for the PSTI vs Australia Cyber Security Act decision. - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - Primary source support for the PSTI vs Australia Cyber Security Act decision. - [THE PRODUCT SECURITY AND TELECOMMUNICATIONS INFRASTRUCTURE (SECURITY REQUIREMENTS FOR RELEVANT CONNECTABLE PRODUCTS) REGULATIONS 2023](https://www.legislation.gov.uk/uksi/2023/1007/pdfs/uksiem_20231007_en_001.pdf?ref=sorena.io) - Primary source support for the PSTI vs Australia Cyber Security Act decision. ## Who should own PSTI vs Australia Cyber Security Act, and what evidence should prove the decision? Ownership should sit with the team that controls product design, supply-chain placement, importer/distributor checks, or customer security information, with legal and product-security review. Evidence should show relevant-connectable-product scope, default-password controls, vulnerability disclosure channel, minimum support period, statement of compliance, supply-chain role checks, and OPSS notice response readiness. - Name one accountable owner and one reviewer for the PSTI vs Australia Cyber Security Act workflow. - Keep source screenshots or source links, decision notes, implementation tickets, and approval records together. - Use dated evidence for deadlines, notices, risk assessments, contracts, user journeys, and regulator-facing records. - Review the evidence after product changes, new markets, new vendors, enforcement updates, or material changes in the source text. Sources for this answer: - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - Evidence and ownership support for UK PSTI Product Security. - [THE PRODUCT SECURITY AND TELECOMMUNICATIONS INFRASTRUCTURE (SECURITY REQUIREMENTS FOR RELEVANT CONNECTABLE PRODUCTS) REGULATIONS 2023](https://www.legislation.gov.uk/uksi/2023/1007/pdfs/uksiem_20231007_en_001.pdf?ref=sorena.io) - Evidence and ownership support for UK PSTI Product Security. - [Consumer connectable product security regulations](https://www.gov.uk/government/publications/OPSS-enforcement-enforcement-actions/consumer-connectable-product-security-regulations?ref=sorena.io) - Evidence and ownership support for UK PSTI Product Security. *Recommended next step* *Placement: after the practical guidance* ## Turn UK PSTI Product Security PSTI vs Australia Cyber Security Act into assigned work Use this UK PSTI Product Security guide to turn PSTI vs Australia Cyber Security Act into owners, evidence requests, review checkpoints, and reusable operating records inside Sorena. - [Open Assessment Autopilot for UK PSTI Product Security](/solutions/assessment.md): Turn PSTI vs Australia Cyber Security Act into scoped questions, evidence fields, and review tasks. - [Review UK PSTI Product Security source evidence](/solutions/research-copilot.md): Use Research Copilot to answer follow-up questions with cited source material. - [Talk through implementation](/contact.md): Review scope, evidence, owners, and the next compliance actions with Sorena. ## Primary sources - [Guidance](https://www.gov.uk/guidance/regulations-consumer-connectable-product-security?ref=sorena.io) - Supports the comparison decision rule. - Quote: "This document provides guidance on regulatory activities, enforcement, and related resources for the Product Security and Telecommunications Infrastructure" - [Regulation of consumer connectable product cyber security](https://www.legislation.gov.uk/ukia/2023/123/pdfs/ukia_20230123_en.pdf?ref=sorena.io) - Supports the comparison decision rule. - Quote: "The government has been working with the tech industry to better secure consumer connectable products for several years" - [THE PRODUCT SECURITY AND TELECOMMUNICATIONS INFRASTRUCTURE (SECURITY REQUIREMENTS FOR RELEVANT CONNECTABLE PRODUCTS) REGULATIONS 2023](https://www.legislation.gov.uk/uksi/2023/1007/pdfs/uksiem_20231007_en_001.pdf?ref=sorena.io) - Supports the comparison decision rule. - Quote: "security requirements for relevant connectable products" - [Consumer connectable product security regulations](https://www.gov.uk/government/publications/OPSS-enforcement-enforcement-actions/consumer-connectable-product-security-regulations?ref=sorena.io) - Supports PSTI vs Australia Cyber Security Act under UK PSTI Product Security. - Quote: "enforcement actions taken by OPSS in relation to consumer connectable product security regulations" - [The UK Product Security and Telecommunications Infrastructure (Product Security) regime](https://www.gov.uk/government/publications/the-uk-product-security-and-telecommunications-infrastructure-product-security-regime?ref=sorena.io) - Supports PSTI vs Australia Cyber Security Act under UK PSTI Product Security. - Quote: "This is a UK government guidance page about the PSTI Product Security regime and compliance requirements" - [Product Security and Telecommunications Infrastructure Act 2022](https://www.legislation.gov.uk/ukpga/2022/46/contents?ref=sorena.io) - Primary UK PSTI Act source for connected product security duties. - Quote: "Product Security and Telecommunications Infrastructure Act 2022" - [Product Security and Telecommunications Infrastructure security requirements regulations 2023](https://www.legislation.gov.uk/uksi/2023/1007/contents?ref=sorena.io) - UK PSTI security requirements regulations for relevant connectable products. - Quote: "security requirements for relevant connectable products" - [Cyber Security Act 2024](https://www.legislation.gov.au/C2024A00098/latest/text?ref=sorena.io) - Official Australian legislation for Cyber Security Act 2024 obligations. - Quote: "Cyber Security Act 2024" - [Security of Critical Infrastructure Act 2018](https://www.legislation.gov.au/C2018A00029/latest/text?ref=sorena.io) - Official Australian legislation for critical infrastructure security obligations. - Quote: "Security of Critical Infrastructure Act 2018" ## Related Topic Guides - [UK PSTI Act relevant connectable products: full scope and category definitions](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/relevant-connectable-products-scope.md): UK PSTI Product Security guidance for Relevant Connectable Products Scope, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Act statement of compliance: evidence requirements and audit documentation](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/statement-of-compliance-and-evidence.md): UK PSTI Product Security guidance for Statement Of Compliance And Evidence, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Act statement of compliance: what must the SoC contain?](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/statement-of-compliance.md): UK PSTI Product Security guidance for Statement Of Compliance, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Act: is your product a relevant connectable product? scope test](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/relevant-connectable-product-scope.md): UK PSTI Product Security guidance for Relevant Connectable Product Scope, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Act: step-by-step statement of compliance preparation workflow](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/statement-of-compliance-workflow.md): UK PSTI Product Security guidance for Statement Of Compliance Workflow, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Act: step-by-step vulnerability disclosure process workflow](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/vulnerability-disclosure-workflow.md): UK PSTI Product Security guidance for Vulnerability Disclosure Workflow, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Act: vulnerability disclosure policy requirements and template](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/vulnerability-disclosure-policy.md): UK PSTI Product Security guidance for Vulnerability Disclosure Policy, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Default Password Requirements](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/default-password-requirements.md): A source-linked guide to the UK PSTI default password rule for consumer connectable products: unique passwords, user-defined setup, prohibited patterns, and evidence to keep. - [UK PSTI Product Security Applicability Test Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/applicability-test.md): Practical guidance for the UK PSTI Product Security applicability test, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security Checklist](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/checklist.md): Practical guidance for the UK PSTI Product Security checklist, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security Compliance Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/compliance.md): Practical guidance for the UK PSTI Product Security compliance, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security Deadlines and Compliance Calendar Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/deadlines-and-compliance-calendar.md): UK PSTI Product Security guidance for Deadlines and Compliance Calendar, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security ETSI Evidence Mapping Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/etsi-evidence-mapping.md): UK PSTI Product Security guidance for ETSI Evidence Mapping, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security FAQ](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/faq.md): Practical guidance for the UK PSTI Product Security FAQ, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security Importer And Distributor Duties Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/importer-and-distributor-duties.md): UK PSTI Product Security guidance for Importer And Distributor Duties, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security Minimum Support Period And Update Transparency Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/minimum-support-period-and-update-transparency.md): UK PSTI Product Security guidance for Minimum Support Period And Update Transparency, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security OPSS Enforcement and Penalties Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/opss-enforcement-and-penalties.md): UK PSTI Product Security guidance for OPSS enforcement and penalties, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security OPSS Notices Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/opss-notices.md): UK PSTI Product Security guidance for OPSS Notices, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security penalties and fines Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/penalties-and-fines.md): UK PSTI Product Security guidance for penalties and fines, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security PSTI Password And Update Policy Requirements Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/psti-password-and-update-policy-requirements.md): UK PSTI Product Security guidance for PSTI Password And Update Policy Requirements, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security PSTI Scope Classifier Workflow Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/psti-scope-classifier-workflow.md): UK PSTI Product Security guidance for PSTI Scope Classifier Workflow, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security PSTI Statement Of Compliance Template Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/psti-statement-of-compliance-template.md): UK PSTI Product Security guidance for PSTI Statement Of Compliance Template, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security PSTI vs CRA Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/psti-vs-cra.md): UK PSTI Product Security guidance for PSTI vs CRA, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security PSTI vs ETSI EN 303 645 Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/psti-vs-etsi-en-303-645.md): UK PSTI Product Security guidance for PSTI vs ETSI EN 303 645, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security PSTI vs EU Cyber Resilience Act Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/psti-vs-eu-cyber-resilience-act.md): UK PSTI Product Security guidance for PSTI vs EU Cyber Resilience Act, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security Requirements Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/requirements.md): Practical guidance for the UK PSTI Product Security requirements, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security Requirements In Practice Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/security-requirements-in-practice.md): UK PSTI Product Security guidance for Security Requirements In Practice, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security Supply Chain Roles Manufacturer Importer Distributor Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/supply-chain-roles-manufacturer-importer-distributor.md): UK PSTI Product Security guidance for Supply Chain Roles Manufacturer Importer Distributor, with practical decisions, evidence, edge cases, and external source citations. - [UK PSTI Product Security Support Period Evidence Workflow Guide](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/support-period-evidence-workflow.md): UK PSTI Product Security guidance for Support Period Evidence Workflow, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Default Passwords under UK PSTI Product Security?](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/faq/default-passwords.md): UK PSTI Product Security guidance for Default Passwords, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about ETSI Evidence under UK PSTI Product Security?](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/faq/etsi-evidence.md): UK PSTI Product Security guidance for ETSI Evidence, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Excepted Products under UK PSTI Product Security?](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/faq/excepted-products.md): UK PSTI Product Security guidance for Excepted Products, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Importer And Distributor Duties under UK PSTI Product Security?](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/faq/importer-and-distributor-duties.md): UK PSTI Product Security guidance for Importer And Distributor Duties, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about OPSS Notices under UK PSTI Product Security?](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/faq/opss-notices.md): UK PSTI Product Security guidance for OPSS Notices, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Relevant Connectable Products under UK PSTI Product Security?](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/faq/relevant-connectable-products.md): UK PSTI Product Security guidance for Relevant Connectable Products, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Statement Of Compliance under UK PSTI Product Security?](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/faq/statement-of-compliance.md): UK PSTI Product Security guidance for Statement Of Compliance, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Support Periods under UK PSTI Product Security?](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/faq/support-periods.md): UK PSTI Product Security guidance for Support Periods, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Update Transparency under UK PSTI Product Security?](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/faq/update-transparency.md): UK PSTI Product Security guidance for Update Transparency, with practical decisions, evidence, edge cases, and external source citations. - [What should teams do about Vulnerability Disclosure under UK PSTI Product Security?](/artifacts/uk/product-security-and-telecommunications-infrastructure-act/faq/vulnerability-disclosure.md): UK PSTI Product Security guidance for Vulnerability Disclosure, with practical decisions, evidence, edge cases, and external source citations. --- [Privacy Policy](https://www.sorena.io/privacy) | [Terms of Use](https://www.sorena.io/terms-of-use) | [DMCA](https://www.sorena.io/dmca) | [About Us](https://www.sorena.io/about-us) (c) 2026 Sorena AB (559573-7338). All rights reserved. Source: https://www.sorena.io/artifacts/uk/product-security-and-telecommunications-infrastructure-act/psti-vs-australia-cyber-security-act