FCC Launches Cyber Trust Mark Program for Safer Smart Home Devices
The voluntary cybersecurity labeling initiative aims to simplify consumer choices by identifying connected devices that meet established security standards.
The Federal Communications Commission (FCC) is introducing the U.S. Cyber Trust Mark program, a new voluntary initiative designed to enhance the security of internet-connected devices commonly found in homes. This program seeks to provide consumers with a clear and simple way to identify products that have been designed with cybersecurity in mind, analogous to how the Energy Star label helps consumers identify energy-efficient appliances.
The Cyber Trust Mark will be applied to devices such as cameras, baby monitors, and door locks that meet specific cybersecurity requirements. These requirements include protecting consumer data, limiting access to authorized users, and ensuring secure software updates. Manufacturers participating in the program will also be expected to provide clear information about their support for the product's security over its lifespan, aiming to reduce the need for consumers to become cybersecurity experts.
Products that qualify for the Cyber Trust Mark will display a distinct shield logo. Accompanying this logo will be a QR code that consumers can scan to access readily available information about the product's security features. This information may include details on changing default passwords, locating software updates, and the duration of manufacturer support.
The FCC is targeting a launch for the Cyber Trust Mark program by next year. The ioXt Alliance has been selected as the lead administrator to manage the program's daily operations. In the coming months, the FCC plans to solicit public input on various aspects of the program, including the design and use of the label, technical testing procedures, and post-market surveillance rules.
This initiative comes as the number of connected devices in American homes continues to rise, with an average of 20 to 25 devices per household, and a significant volume of Internet-of-Things-related cyberattacks occurring daily. The program is intended to not only empower consumers but also to encourage manufacturers to prioritize cybersecurity during the design phase of their products.
While the Cyber Trust Mark aims to improve consumer awareness and reward manufacturers for their security investments, the FCC emphasizes that no label can guarantee a product will never be compromised. The program is part of a broader FCC effort to strengthen cybersecurity, which also includes efforts to remove untrustworthy equipment from U.S. communications networks and improve the integrity of equipment authorization processes.
The FCC encourages feedback from manufacturers, retailers, cybersecurity researchers, and consumer advocates as it develops the program. The ultimate goal is to make cybersecurity a standard feature of connected home devices rather than an afterthought.