Eleanor Hecks, Editor of Designerly Magazine, unpicks the FCC’s voluntary IoT labelling programme, the US Cyber Trust Mark, and its requirements
In March 2024, the US Federal Communications Commission (FCC) established rules for an Internet of Things (IoT) labelling programme. Now, it’s taking its next steps. The agency is now accepting applications to earn the new ‘Cyber Trust Mark’.
Inside the FCC IoT labelling programme
The FCC announced the application process on 10th September, 2024, marking a new stage for IoT security. Under this programme, IoT products can earn an official seal marking their trustworthiness if they meet certain cybersecurity requirements. These include data protection measures, the ability to configure device settings, access controls, secure update protocols and incident detection.
At a glance, it’s similar to the UK Product Security and Telecommunications Infrastructure Act (PSTI). However, there are some notable differences. Most significantly, while the PSTI is mandatory, the FCC’s programme is voluntary. There is no penalty for not meeting its standards, but products that do earn the Cyber Trust Mark differentiate themselves from potentially less secure alternatives.
While the FCC label may not be required, it does hold IoT gadgets to a higher standard. The PSTI’s rules cover just three security requirements — passwords, information on reporting cybersecurity issues and information on update periods. By contrast, earning the US Cyber Trust Mark requires attention to a far broader set of protections and user controls.
People are becoming increasingly aware of the importance of high security standards as cybercrime grows. As single breaches have exposed details on as many as 110 million customers, cybersecurity shortcomings are becoming harder to ignore. Consequently, any gadget with verification of its trustworthiness is preferable to today’s buyers.
How do FCC labels affect global business?
The FCC IoT labelling programme may not apply to the overall global market, but it can still affect worldwide enterprises. Any manufacturer selling smart devices in the US should consider achieving the label. It may not be a mandatory standard, but it does help build trust with consumers.
Now that the labelling programme is underway, many US companies will likely apply and receive the Trust Mark. As they do, global manufacturers selling in the same markets may look less appealing if they don’t also achieve the standard.
How do FCC labels affect global consumers?
Consumers in the US will certainly benefit from the additional standards set in place from the Cyber Trust Mark programme, and customers across the world could benefit from the advancement of this programme, too. While devices sold in the U.K and elsewhere do not have to achieve the Trust Mark, some manufacturers will likely attain it for their US customers. Looking for products meeting these standards gives you more trust that your data is safe.
IoT devices are becoming increasingly common with each passing year. Today, more than 15 billion connected IoT devices are used around the world. Personal use aside, many firms use them to assess consumer preferences, gathering potentially sensitive data. With so much information going between these systems, any push for greater security is a welcome change.
The UK may already have the PSTI, but the FCC label goes further in its requirements. As it catches on, it may inspire similar programmes here or in other markets. IoT cybersecurity standards as a whole will rise, which is good news for anyone using these technologies.
A new era of IoT security is coming
The IoT as it is today is notoriously risky. Stricter government regulations are an important part of changing that, but even voluntary programmes can help. Incentivising organisations to embrace higher levels of protection by providing a way to stand out in a crowded market will drive better security practices across the board.
Regardless of how it plays out in various regions, the FCC’s IoT labelling scheme marks a shift for IoT cybersecurity. It shows both consumers and government authorities are recognising the need for improvement. As that trend continues, smart gadgets will become safer for businesses and consumers alike.
Author: Eleanor Hecks, Editor of Designerly Magazine
There’s plenty of other editorial on our sister site, Electronic Specifier! Or you can always join in the conversation by commenting below or visiting our LinkedIn page.
