The ‘Cyber Trust Mark’ for Smart Gadgets Officially Takes Effect

The White House has officially launched the ‘Cyber Trust Mark’ – the seal of approval for smart devices deemed safe to use without fearing criminals might hack into them.

“Today, the White House announced the launch of a cybersecurity label for internet-connected devices, known as the U.S. Cyber Trust Mark, completing public notice and input over the last 18 months,” reads the press statement released this week by the Biden Administration.

“During that time, FCC Commissioners decided in a bipartisan and unanimous vote to authorize the program and adopt final rules, as well as the trademarked, distinct shield logo that will be applied to products certified for the U.S. Cyber Trust Mark label.”

Consumers increasingly rely on wireless interconnected smart products – those you can link to open your garage door, open your front door lock, set off your house alarm, dim the lights, monitor activity around and inside the house.

“Once inside, you can keep an eye on your baby from the living room, where you can shop using a voice-activated device—to name just a few examples,” according to the Federal Communications Commission. “But with this convenience comes risk. IoT products can be susceptible to a range of security vulnerabilities.”

And there’s been no shortage of abuse over the years as smart gadgets have taken over.

Too easy to hack

In 2020, users of a home security system filed a class action suit after discovering that a technician used his own credentials to set up the hardware and later logged into the webcams to peek inside their home.

In another case that made headlines, a hacking group gained access to the feeds of 150,000 surveillance cameras used inside businesses, schools, police departments, hospitals, and well-known companies.

Examples abound. In most cases, buyers had little to no knowledge that malicious actors could so easily hack into their internet-connected gizmos. Hence the need for a clear signal as to what vendors to trust when making a purchase.

What is the Cyber Trust Mark?

To combat the risks associated with smart (Internet of Things / IoT) devices, the Cyber Trust Mark certification will help consumers identify smart devices that meet strict security standards, including strong credentials, regular updates, and data protection.

Source: FCC

The Cyber Trust Mark aims to help consumers identify products that have been carefully built with security in mind, eliminating the fear that hackers will get an easy pass once they are taken online.

The 'badge' is not unlike the iconic Energy Star seal displayed while booting a PC back in the day.

And later extended to certify systems engineered for compliance.

Source: energystar.gov

“To help address this, the FCC is creating a voluntary cybersecurity labeling program for wireless consumer IoT products,” the commission informs. “The program builds on significant public and private sector work on IoT cybersecurity. And it will rely on public-private collaboration going forward.”

The White House is launching this effort to educate American consumers on the risks involving shady smart gizmos, to help them assess the cybersecurity of the product they’re about to buy, as well as to incentivize the companies selling those products to build them with security in mind.

“The U.S. Cyber Trust Mark program allows them to test products against established cybersecurity criteria from the U.S. National Institute of Standards and Technology via compliance testing by accredited labs, and earn the Cyber Trust Mark label, providing an easy way for American consumers to see the cybersecurity of products they choose to bring into their homes,” according to the press release.

Support from retail giants

Retailers including Best Buy and Amazon reacted positively to the program’s launch, expressing their support.

“We see great potential in the US Cyber Trust Mark Program,” said Michael Dolan, Senior Director, Head of Enterprise Privacy & Data Protection, Best Buy. “It is a positive step forward for consumers and we are excited about the opportunity to highlight this program for our customers.”

Steve Downer, Vice President of Amazon, said his company “supports the U.S. Cyber Trust Mark’s goal to strengthen consumer trust in connected devices.

“We believe consumers will value seeing the U.S. Cyber Trust Mark both on product packaging and while shopping online,” Downer added. “We look forward to collaborating with industry partners and the government on consumer education efforts and implementation strategies.”

Be proactive

Bitdefender recently published the 2024 IoT Security Landscape Report, created in collaboration with Netgear. The report offers an in-depth look at the current state of smart home security, uncovering critical vulnerabilities and providing actionable insights to help safeguard your smart home.