Newsletter
In this day and age, where nearly every new appliance or electronic device is connected to the internet, and hackers are on the lookout to gain unauthorized access to your accounts and data, selecting a device with robust cybersecurity measures is paramount. Now, in a bid to bolster security for IoT devices, the Biden administration has launched a new initiative called the “U.S. Cyber Trust Mark,” which aims to help consumers choose the right smart appliances and fitness trackers that are relatively secure from cyberattacks.
Inspired by the Energy Star program, the U.S. Cyber Trust Mark will operate as a voluntary labeling system featuring a distinctive shield logo on products that meet stringent cybersecurity criteria. Additionally, several major players, including Amazon, Best Buy, Google, LG Electronics U.S.A., Logitech, and Samsung, have already pledged their support for the initiative.
How does the system work?
The Biden administration has tasked the National Institute of Standards and Technology (NIST) to develop the necessary cybersecurity standards, ensuring that certified IoT devices adhere to the highest security benchmarks. And although not finalized yet, the requirements could reportedly include strong default passwords, comprehensive data protection for stored and transmitted information, regular security updates, and the inclusion of incident detection capabilities.
Furthermore, approved devices will feature a QR code that provides up-to-date information on various cybersecurity aspects, such as software updating policies, data encryption standards, and vulnerability remediation. To further raise awareness, the Cybersecurity and Infrastructure Security Agency (CISA) will also educate consumers about the significance of the label and encourage retailers to prioritize labeled products.
However, it is important to note that the system will initially focus on developing cybersecurity standards for high-risk consumer-grade routers. This focus is due to malicious actors targeting these routers to launch Distributed Denial of Service (DDoS) attacks and gain unauthorized access.
Although the FCC is currently in the process of applying for a national trademark for the U.S. Cyber Trust Mark, the government plans to launch the official program in 2024.