As the Internet of Things (IoT) ecosystem continues to expand, standards play a vital role in ensuring that devices can communicate reliably, securely, and efficiently. Without shared standards, IoT systems risk becoming fragmented, insecure, and difficult to scale.

This guide covers the most important IoT standards and protocols you're likely to encounter — from wireless connectivity and cellular technologies through to data protocols, smart home standards, and security frameworks. Whether you're planning a small sensor deployment or a large-scale M2M network, understanding what's available will help you make better decisions about your IoT connectivity.

Why IoT Standards Matter

IoT standards help ensure:

• Interoperability — devices from different manufacturers can work together on the same network.
• Security — communication protocols follow proven protection models and meet regulatory requirements.
• Efficiency — reduced power usage and optimised data transfer, critical for battery-powered devices in the field.
• Scalability — systems can grow from a handful of devices to thousands without creating compatibility issues.

By aligning with recognised standards, organisations build more robust and future-proof IoT solutions.

Cellular IoT Standards

Cellular standards are the backbone of wide-area IoT connectivity, using existing mobile network infrastructure to provide reliable, long-range coverage. These are the standards most relevant to businesses deploying industrial routers and IoT SIM cards.

4G LTE

4G LTE remains the workhorse for many IoT and M2M deployments in the UK. It provides high bandwidth, wide coverage, and well-understood infrastructure. For applications like remote CCTV, broadband backup, and site connectivity, 4G LTE delivers reliable performance. Various device categories exist within LTE — from high-throughput Cat 4 and Cat 6 modules used in routers, down to lower-cost Cat 1 and Cat 1bis modules suited to simpler M2M devices.

LTE-M (Cat-M1)

LTE-M is a low-power wide-area (LPWA) cellular standard designed specifically for IoT. It runs on existing LTE networks but uses a narrower bandwidth (1.4 MHz), significantly reducing power consumption and module cost. LTE-M supports mobility — meaning devices can hand over between cell towers — making it well suited to asset tracking, fleet management, and any application where devices move. It also supports voice (VoLTE), firmware updates over the air (FOTA), and data rates up to around 1 Mbps.

NB-IoT (Narrowband IoT)

NB-IoT is another cellular LPWA standard, but it's optimised for stationary devices that send small amounts of data infrequently. It offers exceptional deep indoor penetration and ultra-low power consumption, with battery life measured in years for some deployments. NB-IoT is ideal for smart meters, environmental sensors, agricultural monitoring, and water level sensors — anything that sits in one place and reports small data payloads periodically.

5G NR (New Radio)

5G NR is the full fifth-generation cellular standard, delivering dramatically higher speeds, lower latency, and greater device density than 4G. 5G comes in two deployment modes: Non-Standalone (NSA), which uses 4G core infrastructure, and Standalone (SA), which runs on a dedicated 5G core and unlocks the full feature set including network slicing and ultra-reliable low-latency communication (URLLC). SA is now rolling out rapidly across the UK. For a detailed explanation, see our guide to 5G NSA vs 5G SA.

5G RedCap (Reduced Capability)

Introduced in 3GPP Release 17, 5G RedCap is a slimmed-down version of 5G NR designed specifically for mid-tier IoT devices. It reduces bandwidth, antenna complexity, and modem cost while retaining key 5G SA benefits like network slicing and improved security. RedCap targets applications like CCTV cameras, industrial sensors, wearables, and fleet trackers — use cases where full 5G would be overkill. Teltonika's RUT271, RUT276, and RUT976 are early examples of RedCap-ready industrial routers.

Low-Power Wide-Area Network (LPWAN) Standards

LPWAN technologies are designed for IoT devices that need long range and long battery life but only transmit small amounts of data. They complement cellular IoT and are widely used in smart city, agriculture, and utility deployments.

LoRaWAN

LoRaWAN (Long Range Wide Area Network) operates in unlicensed sub-GHz spectrum (868 MHz in Europe) and is one of the most popular LPWAN technologies. It can achieve ranges of 2–5 km in urban areas and up to 15 km in rural line-of-sight, while consuming very little power. A key advantage of LoRaWAN is that you can deploy your own gateway infrastructure, meaning no recurring SIM or carrier costs per device. This makes it especially attractive for campus-scale deployments like farms, building complexes, and smart city sensor networks. The trade-off is low data rates (typically under 50 kbps) and higher latency, so it's best suited to infrequent, small-payload transmissions.

Sigfox

Sigfox is a proprietary LPWAN technology that uses an ultra-narrowband approach to deliver very low-power, long-range communication. Devices can send up to 140 messages per day, each a maximum of 12 bytes. This extreme simplicity keeps module costs and power consumption very low, but it limits Sigfox to basic telemetry use cases like leak detection or simple environmental monitoring. Sigfox's commercial future has been uncertain following the acquisition of the company by UnaBiz, and adoption has declined relative to LoRaWAN and cellular LPWA alternatives.

Short-Range Wireless Standards

Short-range protocols connect devices within a building, room, or local area. They're typically used in smart home, building automation, and industrial environments where devices communicate with a nearby gateway or hub.

IEEE 802.15.4

A foundational low-power wireless standard used for low-rate wireless personal area networks (LR-WPANs). It defines the physical and data link layers and provides the underlying radio technology for several higher-level IoT protocols including Zigbee, Thread, and 6LoWPAN. You won't typically choose 802.15.4 directly — rather, it underpins the protocols listed below.

Zigbee

A low-power, mesh-capable wireless specification built on IEEE 802.15.4. Zigbee is widely used in smart home devices, industrial sensors, and building automation due to its low energy consumption, reliable self-healing mesh networking, and strong interoperability frameworks. Zigbee 3.0 unified earlier Zigbee profiles into a single standard, and the newer Zigbee 4.0 adds support for sub-GHz frequencies alongside 2.4 GHz for improved range and building penetration.

Z-Wave

Z-Wave is a wireless mesh protocol primarily used in smart home automation. It operates on sub-1 GHz frequencies (868 MHz in Europe), which gives it better range and wall penetration than 2.4 GHz alternatives. Z-Wave has historically been a proprietary standard, but the specification was opened in 2020, broadening manufacturer adoption. It supports up to 232 devices on a single network and is commonly used for lighting, heating, door locks, and alarm systems.

Bluetooth Low Energy (BLE)

BLE is the low-power variant of Bluetooth, optimised for IoT and short-range communication. It's ubiquitous in wearables, beacons, asset tags, health monitors, and proximity-based applications. BLE consumes very little power and is supported natively by smartphones, making it the default choice for IoT devices that need to communicate with a phone or tablet. Bluetooth 5.0 and later versions significantly increased range and throughput.

Wi-Fi (IEEE 802.11)

Wi-Fi needs little introduction. For IoT, Wi-Fi 6 (802.11ax) and the newer Wi-Fi 7 (802.11be) offer high throughput, low latency, and better handling of many simultaneous devices. Wi-Fi is ideal for IoT applications with access to mains power and a need for high bandwidth — such as security cameras, digital signage, and industrial gateways. The downside is relatively high power consumption, making it unsuitable for battery-powered sensors.

Wi-Fi HaLow (IEEE 802.11ah)

Wi-Fi HaLow operates in sub-1 GHz spectrum and is specifically designed for IoT. It offers significantly longer range than conventional Wi-Fi (up to 1 km) with lower power consumption, while still using familiar IP-based networking. It's gaining traction for smart building, agriculture, and industrial monitoring applications where Wi-Fi's range has traditionally been a limitation.

Thread

Thread is an IPv6-based, low-power mesh networking protocol designed for smart home and building automation. Built on IEEE 802.15.4, it creates self-healing mesh networks that are reliable and secure. Thread is significant because it forms the networking layer for the Matter smart home standard (see below). Thread networks don't require a hub to function — any Thread device can act as a router within the mesh, improving resilience.

Smart Home Standards

Matter

Matter is the smart home interoperability standard developed by the Connectivity Standards Alliance (CSA), with backing from Apple, Google, Amazon, and Samsung among others. It aims to solve the long-standing problem of smart home devices only working with specific ecosystems. Matter runs over Thread, Wi-Fi, and Ethernet, and ensures devices from different manufacturers can communicate and be controlled from any compatible platform. Matter 1.4 (released in late 2025) expanded device support and mandated device attestation certificates for improved security. For consumer-facing IoT products, Matter is rapidly becoming the expected baseline.

IoT Data and Messaging Protocols

These application-layer protocols define how IoT devices exchange data with servers, platforms, and each other. The choice of data protocol affects bandwidth usage, battery life, latency, and how easily devices integrate with cloud platforms.

MQTT (Message Queuing Telemetry Transport)

MQTT is the most widely used IoT messaging protocol. It uses a lightweight publish/subscribe model where devices send data to a central broker, which then distributes it to subscribers. MQTT was originally designed for satellite links and constrained networks, making it ideal for IoT deployments over low-bandwidth connections. It supports three quality-of-service levels (from fire-and-forget to guaranteed delivery), works well over cellular and LPWAN connections, and integrates easily with cloud platforms like AWS IoT, Azure IoT Hub, and open-source brokers like Mosquitto. MQTT 5.0, the current version, added features like shared subscriptions, message expiry, and improved error handling.

CoAP (Constrained Application Protocol)

CoAP is a lightweight client-server protocol designed for resource-constrained devices. It mirrors the RESTful design of HTTP (using GET, POST, PUT, DELETE operations) but runs over UDP rather than TCP, making it far more efficient for devices with limited memory and processing power. CoAP is commonly used in smart metering, sensor networks, and remote maintenance applications. It's also the foundation for the LwM2M device management protocol.

LwM2M (Lightweight M2M)

Developed by OMA SpecWorks, LwM2M is built on top of CoAP and provides standardised device management for IoT. It handles bootstrapping, registration, remote configuration, firmware updates (FOTA), and monitoring — all critical for managing large fleets of connected devices. LwM2M is particularly common in cellular IoT deployments using NB-IoT and LTE-M, where remote device management without site visits is essential.

AMQP (Advanced Message Queuing Protocol)

AMQP is an open-standard messaging protocol widely used in enterprise environments, particularly in financial services and backend systems. It provides robust message queuing, routing, and guaranteed delivery. While heavier than MQTT, AMQP is suited to IoT architectures that require complex message routing, transaction support, or integration with enterprise middleware. It runs over TCP and supports both publish/subscribe and request/response patterns.

HTTP/HTTPS

The standard web protocol is also used in IoT, particularly for devices with sufficient processing power and bandwidth. HTTP is straightforward to implement and compatible with virtually every cloud service, but it's relatively heavy in terms of overhead and power consumption compared to MQTT or CoAP. It's best suited to mains-powered devices, gateways, and applications where simplicity and compatibility matter more than efficiency.

OPC UA (Open Platform Communications Unified Architecture)

OPC UA is the dominant standard for industrial IoT data exchange, particularly in manufacturing, process automation, and SCADA systems. It provides a platform-independent framework for secure, reliable data communication between industrial equipment, PLCs, and enterprise systems. Major industrial vendors including Siemens, SAP, Microsoft, and AWS support OPC UA for edge-to-cloud applications. When combined with Time-Sensitive Networking (TSN), OPC UA enables deterministic real-time communication over standard Ethernet — replacing proprietary industrial fieldbus systems.

IoT Security Standards and Frameworks

Security is no longer optional for IoT. Regulations like the EU Cyber Resilience Act (CRA) and the UK's Product Security and Telecommunications Infrastructure (PSTI) Act now mandate baseline security for consumer connected devices. For industrial and enterprise IoT, the stakes are even higher.

ETSI EN 303 645

The European Telecommunications Standards Institute's EN 303 645 is the baseline cybersecurity standard for consumer IoT devices. It sets out 13 provisions covering areas like no default passwords, keeping software updated, secure communication, and minimising exposed attack surfaces. It has been widely adopted as the reference standard for consumer IoT security in Europe and influenced the UK's PSTI Act.

UK PSTI Act

The Product Security and Telecommunications Infrastructure Act came into force in April 2024 and makes it a legal requirement for manufacturers of consumer-connectable products sold in the UK to meet minimum security standards. Key requirements include banning universal default passwords, providing a vulnerability disclosure policy, and being transparent about how long the product will receive security updates.

ISO/IEC 27400:2022

This international standard provides guidelines for IoT security and privacy, covering both cyber and physical security dimensions across the full device lifecycle. It's one of the most comprehensive IoT security standards available and is relevant to organisations managing large-scale IoT deployments.

NIST IoT Security Framework

The US National Institute of Standards and Technology publishes several IoT security frameworks, including the NISTIR 8259 series for manufacturers and SP 800-213 for federal agencies. While US-focused, NIST frameworks are widely referenced internationally and provide practical, detailed guidance on securing IoT device capabilities.

How to Choose the Right Standards for Your IoT Project

There is no single "best" standard — the right choice depends on your specific use case. Here are some practical guidelines:

• Stationary devices sending small data payloads (smart meters, environmental sensors) — NB-IoT or LoRaWAN, with MQTT or CoAP for data transfer.
• Moving assets (fleet tracking, logistics, mobile plant) — LTE-M, with MQTT for cloud reporting.
• High-bandwidth applications (CCTV, video analytics, broadband backup) — 4G LTE or 5G, with HTTP/HTTPS or MQTT depending on the architecture.
• Mid-tier IoT devices (industrial cameras, richer sensors, wearables) — 5G RedCap as the ecosystem matures.
• Campus or site-wide sensor networks (farms, buildings, factories) — LoRaWAN for zero-recurring-cost coverage, or Zigbee/Thread for indoor mesh.
• Smart home and consumer products — Matter over Thread or Wi-Fi for maximum ecosystem compatibility.
• Industrial automation and SCADA — OPC UA, potentially over TSN for deterministic real-time requirements.

In many real-world deployments, multiple standards are used together. A CCTV installation might use a 4G router with an IoT SIM for backhaul, while environmental sensors on the same site use LoRaWAN to report to a local gateway. The key is matching each part of the system to the standard that best fits its requirements for range, bandwidth, power, and cost.

Summary

The IoT standards landscape is broad, but you don't need to master all of it. Focus on the standards that are relevant to your deployment: cellular standards like 4G, 5G, NB-IoT, and LTE-M for wide-area connectivity; MQTT and CoAP for efficient data transfer; and the appropriate security frameworks to meet regulatory requirements and protect your systems.

At Millbeck, we help businesses navigate these choices every day. Whether you need advice on selecting the right IoT SIM and data plan, choosing a 5G-ready router, or understanding which connectivity standard fits your application, our team is here to help.

Get in touch — sales@millbeck.co.uk or call us on 0113 548 0770.