IoT Security Labeling Improving, But More Collaboration Needed

• The article discusses the U.S. Cyber Trust Mark program, a new national label for consumer IoT device security based on NIST IR 8425 standards, aimed at providing buyers with a reliable way to assess product security.
• It details a six-step process initiated by the Connectivity Standards Alliance (CSA) and Product Security Working Group (PSWG) to create a global certification program for consumer IoT product security.
• The author, Steve Hanna, emphasizes the trend towards transparency in IoT security and the potential for a global cybersecurity standard, highlighting the role of companies in developing certified products that adhere to these new security measures.

In the article “IoT Security Labeling Improving, But More Collaboration Needed,” Steve Hanna writes about the recent advancement in consumer IoT device security through the U.S. Cyber Trust Mark program. Based on the criteria defined in NIST IR 8425, this program offers an objective way for consumers to identify products with a verified baseline level of security. Hanna argues that this development is critical for the IoT industry, as cybersecurity is a fundamental prerequisite for its growth.

The article then discusses the process used by the U.S. government in collaboration with the industry to enhance IoT device security. The Connectivity Standards Alliance (CSA) played a significant role in this process, forming the Product Security Working Group (PSWG) to focus on improved IoT device security. This led to a six-step problem-solving approach, developing a global certification program for consumer IoT product security. The program, supported by over 130 companies, aligns with various international standards and regulations, including those from NIST, the European standard (ETSI EN 303 645), and the Singapore Cybersecurity labeling scheme.

Hanna notes that the announcement of the consumer label indicates a move towards greater transparency in IoT security. This trend is expected to lead to a reliable global cybersecurity standard. As more countries adopt similar measures, consumers will benefit from a more comprehensive selection of certified products, and manufacturers will enjoy simplified certification processes across multiple markets.

Finally, the article emphasizes the ongoing commitment of CSA and its members, including companies like Infineon Technologies, to enhance safety and security in the IoT ecosystem. These companies recognize the importance of adhering to the PSWG standard and global label programs for future business success. Hanna highlights the need for continuous efforts in cybersecurity, as new challenges and steps will inevitably arise in pursuing a more secure and reliable IoT.

Read the full article