White House Announces Smart Device Cybersecurity Labeling

The Biden administration has unveiled a new labeling system for smart devices. The U.S. Cyber Trust Mark identifies consumer electronics and appliances that meet security standards and are less vulnerable to cyberattacks. Companies including Amazon, Google, LG, Qualcomm, Samsung and retailer Best Buy participated in announcing the voluntary program. The Connectivity Standards Alliance (CSA), purveyor of the Matter smart home standard, has also pledged support. The program is scheduled to roll out in 2024. Devices bearing the U.S. Cyber Trust Mark will have met security standards established by the National Institute of Standards and Technology (NIST).

The program will be administered by the Federal Communications Commission, which regulates wireless communication devices. FCC Chairwoman Jessica Rosenworcel compared the initiative to Energy Star, which labeling denotes electronics and appliances that meet specifications for energy conservation.

Prior to its 2024 rollout, the FCC is expected to seek public comment on the cybersecurity labeling program proposal. Among the NIST criteria are requirements for “unique and strong default passwords, data protection, software updates, and incident detection capabilities,” a White House statement explains.

The FCC has applied for a labeling trademark with the U.S. Patent and Trademark Office (USPTO). The Biden administration — including the Cybersecurity and Infrastructure Security Agency (CISA) — will work with the FCC in educating consumers to consider the label when making purchasing decisions. Retailers will also be educated to prioritize labeled products in merchandising in store and online.

“The Cyber Trust label is comprised of two parts: a logo stamped on the box of a product, and a QR code that buyers can scan later to verify that the device is still certified as cybersecurity threats evolve and patches are needed,” The Verge reports.

Certifications will fall to third-party entities such as the CSA or the Consumer Technology Association. Recertifications will also take place to keep up with evolving security threats.

The announcement comes on the heels of further details of the Biden administration’s announcement of a broader U.S. National Cybersecurity Strategy framework.

No Comments Yet

You can be the first to comment!

Leave a comment

You must be logged in to post a comment.