The White House Unveils the "U.S. Cyber Trust Mark" to Evaluate the Security of Your Devices.
The voluntary cybersecurity labeling program will help individuals make informed decisions.
The White House has introduced the 'U.S. Cyber Trust Mark,' a labeling initiative aimed at fostering trust in the consumer device market. This badge will serve as an indicator that products meet the cybersecurity criteria set by the National Institute of Standards and Technology (NIST).
As internet-connected devices, such as home security systems, smart speakers, and appliances, have become more common in American homes, the security risks associated with this technology have also increased, making them susceptible to attacks.
Following a bipartisan vote that authorized the program and the trademarked shield logo to be applied to products meeting the standards, the FCC has conditionally approved 11 companies as 'Cybersecurity Label Administrators,' including Intertek Testing Services NA and ioXt Alliance.
The criteria to meet NIST standards include strong default passwords, security updates, data protection frameworks, and detection of cybersecurity incidents. Companies like Best Buy and Amazon have shown their support for this initiative, highlighting the opportunity it presents to increase consumer trust.
However, not everyone agrees with this program. Some critics have expressed concerns over the lack of rigorous testing for providers, noting that the mark does not establish mandatory security requirements. While there is a consensus that this measure is a step forward, many of the security criteria are merely suggestions, as the program is entirely voluntary. This could lead to inconsistencies among sellers and make it difficult to identify the companies that are truly working to secure their devices.
Consumers will be able to scan a QR code on products bearing the security mark to access information from an IoT registry, a more complex process compared to the FCC's security labeling, which provides a reasonable assumption of security.