Consumers have become accustomed to various labels and seals of approval on products during the shopping process, from Energy Star to sustainability standards. Next, shoppers should be prepared to receive a hack-proof security seal of approval from the federal government for their home gadgets and appliances.
Last July, the Biden administration and the FCC suggested Establishes the U.S. Cyber Trust Mark Program, a voluntary cybersecurity product labeling program to help consumers choose connected devices that manufacturers certify to be safe from hackers, scammers, and other cybercriminals .
Final details are still to be determined, but as proposed, the program would require manufacturers of smart Internet of Things (IoT) devices to participate, including doorbell cameras, voice-activated speakers, baby monitors, televisions, kitchen appliances, thermostats and fitness equipment. Tracker – Meets a set of cybersecurity standards set by the National Institute of Standards and Technology (NIST). These include unique passwords, data protection, software patches and updates, and event detection capabilities.
Currently, the program excludes smartphones, PCs, routers and certain connected medical devices, such as smart thermometers and CPAP machines, which are covered by Federal Drug Administration regulations. Also excluded are motor vehicles and the data stored in them, which are regulated by the National Highway Traffic Safety Administration and where data privacy concerns have been rising.
The program will rely on public-private partnerships, with oversight and enforcement provided by the Federal Trade Commission, and activities such as evaluation of product applications, authorized use of labels, and consumer education managed by approved third-party label administrators. Compliance testing will be conducted by an accredited laboratory.
Compliant product packaging will feature the U.S. Cyber Trust Mark Shield logo and a QR code printed on it that consumers can scan on their smartphones to receive detailed, up-to-date security information about that specific device. . “Just like the Energy Star mark helps consumers understand which devices are energy efficient, the Internet Trust Mark will help consumers make more informed purchasing decisions about device privacy and security,” FCC Chairman Jessica Rosen Jessica Rosenworcel said.
So far, Amazon, Best Buy, Google, LG Electronics USA, Logitech and Samsung Electronics have committed to the program, but the companies have yet to use the symbol.
Holiday season tag a target, but unlikely
March, FCC votes to approve plan, scheduled to launch later this year. “There is hope,” said Nicholas Leiserson, the White House’s assistant national director for cyber policy and programs, during a cybersecurity panel discussion at the McCrary Institute at Auburn University in Washington in May. Over the holidays, you should start seeing devices with this capability.
However, despite the government’s best intentions, consumers won’t see products bearing the logo until early next year at the earliest. In an email asking about the launch timeline, an FCC spokesperson did not provide any specific dates.
“We are now working as quickly as possible to launch this comprehensive plan,” the spokesperson said. “We are currently undergoing the standard intergovernmental review process required for new rules of this type. Once that process is completed, we will publicly communicate next steps.”
Meanwhile, manufacturers are waiting for the final rule, said David Grossman, the company’s vice president of policy and regulatory affairs. Consumer Technology Association, representing more than 1,000 technology companies. “Once a manufacturer receives Trustmark certification, they will need additional time to realign their packaging and ship updated products from the manufacturer to retailers,” he said.
70 million U.S. households actively use smart devices
While the details of the scheme are being finalized, it’s worth examining why consumers need the protection it offers. According to data from research company Statista, nearly 70 million households in the United States will actively use smart devices by 2024, an increase of more than 10% from last year. By 2028, this number is expected to reach 100 million households.
Many of these devices and the Wi-Fi networks and routers that connect them lack adequate security. 2023 study Research firm Park Associates found that nearly 75% of U.S. households with Internet service are concerned about the security of their personal data, and 54% said they had experienced data privacy or security issues in the past 12 months, up from 5% in 5 months. increased by 50%.
Consumer Reports staff attended a White House meeting where the online trust mark initiative was announced. The organization then conducted a U.S. Experience Survey, which included questions about the program and the type of data protection information consumers want before purchasing smart devices.
About two-thirds of respondents (69%) said it was important to know who the data collected was shared or sold to, with 92% saying such information was very or somewhat important. Three-quarters of respondents said it is the responsibility of these device manufacturers to provide consumers with privacy and security information, while only 8% said the government has a responsibility.
“It’s important to have consumer-readable standards for IoT devices because it’s totally the Wild West right now,” said Stacey Higginbotham, a cybersecurity expert and Consumer Reports contributor. “Consumers really care about having this kind of information, so that’s why we need this program.”
Higginbotham noted that the breadth of the proposed plan would require more stringent levels of cybersecurity, not just for the devices themselves, but also for the internet services that connect them and the cloud networks where personal data is stored. She’s also pleased that it includes a guaranteed support window, which specifies the number of years product manufacturers will continue to provide software security updates and patches.
Voluntary schemes are a business reality
One criticism is that the program is voluntary for manufacturers. “I would like to see this as a mandatory program, but the reality in the United States is that it has to be a voluntary program,” Higginbotham said, referring to the business community’s frequent resistance to government-imposed regulations.
“If you’re going to participate, you have to meet the requirements set by the FCC. Device manufacturers don’t want the agency to dictate things like the size or exact placement of online trust marks on packaging that are displayed,” Grossman said. “You want something that’s easily recognizable to consumers, but you also want to make sure the manufacturer has flexibility.”
That means companies may shy away from making commitments if the final proposal is too prescriptive, Grossman said. “If the requirements are too onerous, I don’t think companies will be so eager to participate,” he said.
Barry Mainz, chief executive of cybersecurity vendor Forescout Technologies, said he’s a big fan of online trust marks. “This is a big step in the right direction, making it more complicated to get into these devices,” he said. Still, he’s concerned about the millions of IoT devices in people’s homes today, which are vulnerable to cyberattacks and cannot be retroactively tagged. “What’s the responsibility of the companies that make these devices?” he said. Mainz said that as a goodwill measure, some of the more popular products, such as smart TVs and door locks, could be voluntarily upgraded by manufacturers to prevent hackers, “so that people who can’t afford to go out and buy new things can Make sure they are safe.
Steps you need to take now to protect your home internet
Ahead of the launch of the Online Trust Mark program, there are a number of actions consumers can take now to enhance their online security. Perhaps the most important component to watch out for is the router that wirelessly interconnects your devices. They ship from the manufacturer with a default password that hackers can change to spy on you or access files on network-connected hard drives. Instantly create your own strong and unique passwords, not just for the router, but for every connected device, and use two-factor authentication if available. If there is a guest network on the router, set it up with a separate password. Also make sure your router’s software is up to date, usually by activating the automatic update feature, although you can check the manufacturer’s website for patches you can download and install.
Of course, you can take a Luddite approach and simply avoid all these IoT technologies and devices. But for the millions of consumers embracing smart homes, online trust badges — once in place — should provide for tighter cybersecurity measures, giving them a step ahead, or at least a leg up on the bad guys. step.
About The Author
