The US government on Tuesday announced launch of the US Cyber Trust Mark, a new cybersecurity mark for consumer Internet of Things (IoT) devices.
“IoT products may be susceptible to a number of security vulnerabilities,” notes the US Federal Communications Commission (FCC). said. “Under this program, qualifying consumer smart products that meet robust cybersecurity standards will carry a label, including a new ‘US Cyber Trust Mark.'”
As part of the effort, the logo will be accompanied by a QR code that users can scan, taking them to an information register with easy-to-understand details about the product’s security, such as the support period and the availability of software patches. and security updates are automatic.
The information will also include details on changing the default password and various actions users can take to configure the device securely.
initiative, announced expected in July 2023. third-party cybersecurity shortcut administrators will be engaged to be responsible for evaluating product applications and authorizing shortcut use. Compliance testing will be conducted by accredited laboratories, the FCC added.
Eligible products covered by the Cyber Trust Mark program include Internet-connected home security cameras, voice-activated shopping devices, smart appliances, fitness trackers, garage door openers and baby monitors.
It does not apply to medical devices regulated by the Food and Drug Administration (FDA); vehicles and equipment regulated by the National Highway Traffic Safety Administration (NHTSA); wired devices; and products used for manufacturing, industrial control, or enterprise applications.
The program also does not cover FCC-listed equipment List covered; and products manufactured by companies added to other lists for national security reasons (Department of Commerce List of objects or the Ministry of Defense List of Chinese military campaigns), or prohibited for federal procurement.
To apply for the US Cyber Trust Mark, manufacturers who meet the eligibility criteria must have their products tested by an accredited and recognized FCC CyberLAB to ensure they meet the requirements of the cybersecurity program, and then submit an application to the Cybersecurity Label Administrator in the necessary supporting documents.
“The Cyber Trust Mark program in the US allows products to be tested against established US National Institute of Standards and Technology cybersecurity criteria through compliance testing at accredited laboratories and receive the Cyber Trust Mark label, providing an easy way for US consumers to see the cybersecurity of products that they chose to bring into their homes,” the White House said.
