US Officials to Unveil Details on Smart Device Cybersecurity Certification at CES 2025

The Federal Communications Commission (FCC) is gearing up to announce the lead administrator for a voluntary cybersecurity certification program aimed at improving the security of smart devices. Deputy National Security Advisor Anne Neuberger revealed during a National Security Telecommunications Advisory Committee meeting on Thursday that the program will soon be “open for business,” with more information set to be unveiled at the 2025 Consumer Electronics Show (CES) in January.

Dubbed the Cyber Trust Mark, the certification aims to address growing concerns about the vulnerabilities of Internet of Things (IoT) devices. The program will certify devices that meet baseline cybersecurity standards, with the label displayed prominently alongside a QR code. This code will allow users to access detailed information about the product’s security features, such as the duration of security support and whether manufacturers release automatic updates or patches.

“This initiative marks a significant step forward in safeguarding IoT devices,” Neuberger said. “The Cyber Trust Mark will empower consumers to make informed choices and ensure that devices on the market adhere to essential security benchmarks.” The program draws comparisons to the ENERGY STAR certification, offering an easily recognizable label for cybersecurity compliance.

The initiative builds upon President Biden’s 2021 executive order that mandated stronger cybersecurity measures across federal agencies, including the implementation of multi-factor authentication and enhanced security protocols. The National Institute of Standards and Technology (NIST), which has been actively expanding its role in IoT security through its recently established IoT Advisory Board, has developed the baseline standards underpinning the certification. These standards address key cybersecurity areas, including governance, secure access, data protection, and incident response.

To refine the program, the FCC conducted a public comment period last August, shaping the final framework based on stakeholder input. Officials aim to see certified products on shelves by early 2025. The program’s international alignment is particularly noteworthy, as the European Union has agreed to adopt the labeling scheme, creating potential for a unified global standard for IoT device security certification.

The Cyber Trust Mark is part of a broader effort by the Biden administration to bolster national cybersecurity. Alongside improving federal agencies’ cyber postures, the administration has been actively working to enhance security across various critical industries, including taking decisive action against potential security risks, as evidenced by the recent ban on Kaspersky cybersecurity products due to national security concerns.

Source: NextGov

–

November 15, 2024 – by the ID Tech Editorial Team