FCC introduces voluntary cybersecurity labeling for IoT devices

The Federal Communications Commission, Washington, D.C., has officially announced the launch of a voluntary cybersecurity labeling program designed to enhance the security of wireless consumer Internet of Things products.  

The new initiative, branded as the “U.S. Cyber Trust Mark,” aims to guide consumers in making informed purchasing decisions by identifying products that adhere to stringent cybersecurity standards. 

“Our expectation is that over time more companies will use the Cyber Trust Mark—and more consumers will demand it,” wrote FCC Chairwoman Jessica Rosenworcel. “This has the power to become the worldwide standard for secure Internet of Things devices. To get to this point, we know we need to work with our federal partners, manufacturers, retailers and cybersecurity groups. We are ready to do just that.” 

Under the program, smart products that qualify will feature the U.S. Cyber Trust Mark logo, accompanied by a QR code providing detailed information about the product’s security features, including support duration and the approach to software patches and security updates. 

The program covers a range of consumer IoT products such as home security cameras, smart appliances, fitness trackers, and internet-connected garage door openers, among others. It emphasizes public-private collaboration, with the FCC overseeing the initiative and approved third-party administrators evaluating products, authorizing label use and educating consumers. 

The initiative comes in response to the escalating threats against IoT devices, which saw over 1.5 billion attacks in the first half of 2021 alone, according to the FCC.  

With the number of connected IoT devices projected to exceed 25 billion by 2030, the program seeks to bolster the cybersecurity infrastructure of these devices.