Biden administration wants standard cyber security labelling for smart devices
(2022/10/20)
- Reference: 1666258214
- News link: https://www.theregister.co.uk/2022/10/20/biden_administration_iot_security_labels/
- Source link:
The Biden administration has accelerated its efforts to add cyber security labelling for consumer Internet of Things (IoT) devices, and may join other nations in adopting the scheme pioneered by Singapore.
The administration's efforts were unveiled at a Wednesday meeting attended by US deputy national security advisor for cyber and emerging technology Anne Neuberger, Federal Communications Commission (FCC) chairwoman Jessica Rosenworcel, national cyber director Chris Inglis, and representatives from telcos and other tech companies including Google, AT&T, Cisco, Intel, Samsung and more.
Google's VP engineering, Dave Kleidermacher, took to the Chocolate Factory's [1]blog to confirm the company's attendance at the workshop. The veep summarized the problematic nature of increasingly interconnected devices amid ever evolving cybersecurity threats:
Not only are we becoming more deeply connected through IoT devices, we're now putting more of our lives and trust in the hands of digital technology.
Yet, the IoT industry still lacks a global harmonized way for measuring the security quality of connected products, which means consumers may not have the visibility they need into whether their IoT devices protect their data.
The US standards are expected to roll out by Spring 2023, initially as a voluntary system. Ratings are likely to reflect quantity of data collected, how easily the device can be patched or upgraded to mitigate vulnerabilities, data encryption, and interoperability.
[2]Founder of cybersecurity firm Acronis is afraid of his own vacuum cleaner
[3]CISA warns of security holes in industrial Advantech, Hitachi kit
[4]Millennials, Gen Z actually suck at workplace security
[5]So, the US, China, and Russia walk into an infosec conference
The IoT workshop of industry and government reps was referenced by Neuberger on Thursday during a streamed speech at Singapore International Cyber Week (SICW) 2022 – a conference that drew [6]government and industry representatives from all over the world to discuss cyber security.
Neuberger said countries must work to avoid fragmentation of IoT standards since such fragmentation could burden consumers – particularly as they transit between jurisdictions.
[7]
The security advisor also said the US was looking to Singapore for inspiration on labelling as it had "become a world leader in IoT" – a sentiment she also expressed to journalists [8]the week prior .
[9]
[10]
In 2014, the city-state launched its Smart Nation initiative, which seeks not only to collect data and digitize public services, but to incorporate interoperable IoT and automation across all aspects of life – including transport, healthcare, food and beverages, logistics and more.
Singapore launched its Cybersecurity Labelling Scheme (CLS) in October 2020. Some gradients of the four-level scheme are mutually recognized by Finland.
[11]
During the conference, Cyber Security Agency (CSA) of Singapore director Soon Chia Lim said the largely voluntary CLS scheme was designed with four levels so that developers and manufacturers feel they can easily climb to higher security ratings.
At a SICW 2022 keynote, Singapore minister of state Janil Puthicheary said the CLS has "gained much traction internationally" and announced Germany was expected to sign a mutual recognition agreement (MRA) on the labels as well.
"In addition to signing these MRAs with countries with similar schemes, Singapore has been working with industry and government partners to put up a proposal to develop an international standard, ISO 27404, which defines a Universal Cybersecurity Labelling Framework (UCLF) for consumer IoT. The UCLF will serve as a guide for countries that are looking to implement and set up their own labelling schemes for consumer IoT," said Puthicheary.
[12]
"It's easier to use what's out there than recreate the wheel" said Internet of Secure Things (IoXt) Alliance director of operations Grace Burkard during a SICW roundtable discussion.
"We need to be aligned not just to prevent attacks on untested IoT devices, but to fuel innovation," said Burkard. "Without global synchronized IoT standards, IoT doesn't have the runway it needs to evolve." ®
Get our [13]Tech Resources
[1] https://blog.google/technology/safety-security/how-google-is-helping-to-make-the-internet-of-things-more-secure/
[2] https://www.theregister.com/2022/10/03/acronis_founder_smart_devices/
[3] https://www.theregister.com/2022/10/20/cisa_flaws_advantech_hitachi/
[4] https://www.theregister.com/2022/10/19/millennials_gen_z/
[5] https://www.theregister.com/2022/10/19/singapore_international_cyber_week/
[6] https://www.theregister.com/2022/10/19/singapore_international_cyber_week/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y1EcN64VGlv93tlZSH0bfQAAAE8&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[8] https://twitter.com/ashleyrgold/status/1580685081001066496
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y1EcN64VGlv93tlZSH0bfQAAAE8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y1EcN64VGlv93tlZSH0bfQAAAE8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y1EcN64VGlv93tlZSH0bfQAAAE8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y1EcN64VGlv93tlZSH0bfQAAAE8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://whitepapers.theregister.com/
The administration's efforts were unveiled at a Wednesday meeting attended by US deputy national security advisor for cyber and emerging technology Anne Neuberger, Federal Communications Commission (FCC) chairwoman Jessica Rosenworcel, national cyber director Chris Inglis, and representatives from telcos and other tech companies including Google, AT&T, Cisco, Intel, Samsung and more.
Google's VP engineering, Dave Kleidermacher, took to the Chocolate Factory's [1]blog to confirm the company's attendance at the workshop. The veep summarized the problematic nature of increasingly interconnected devices amid ever evolving cybersecurity threats:
Not only are we becoming more deeply connected through IoT devices, we're now putting more of our lives and trust in the hands of digital technology.
Yet, the IoT industry still lacks a global harmonized way for measuring the security quality of connected products, which means consumers may not have the visibility they need into whether their IoT devices protect their data.
The US standards are expected to roll out by Spring 2023, initially as a voluntary system. Ratings are likely to reflect quantity of data collected, how easily the device can be patched or upgraded to mitigate vulnerabilities, data encryption, and interoperability.
[2]Founder of cybersecurity firm Acronis is afraid of his own vacuum cleaner
[3]CISA warns of security holes in industrial Advantech, Hitachi kit
[4]Millennials, Gen Z actually suck at workplace security
[5]So, the US, China, and Russia walk into an infosec conference
The IoT workshop of industry and government reps was referenced by Neuberger on Thursday during a streamed speech at Singapore International Cyber Week (SICW) 2022 – a conference that drew [6]government and industry representatives from all over the world to discuss cyber security.
Neuberger said countries must work to avoid fragmentation of IoT standards since such fragmentation could burden consumers – particularly as they transit between jurisdictions.
[7]
The security advisor also said the US was looking to Singapore for inspiration on labelling as it had "become a world leader in IoT" – a sentiment she also expressed to journalists [8]the week prior .
[9]
[10]
In 2014, the city-state launched its Smart Nation initiative, which seeks not only to collect data and digitize public services, but to incorporate interoperable IoT and automation across all aspects of life – including transport, healthcare, food and beverages, logistics and more.
Singapore launched its Cybersecurity Labelling Scheme (CLS) in October 2020. Some gradients of the four-level scheme are mutually recognized by Finland.
[11]
During the conference, Cyber Security Agency (CSA) of Singapore director Soon Chia Lim said the largely voluntary CLS scheme was designed with four levels so that developers and manufacturers feel they can easily climb to higher security ratings.
At a SICW 2022 keynote, Singapore minister of state Janil Puthicheary said the CLS has "gained much traction internationally" and announced Germany was expected to sign a mutual recognition agreement (MRA) on the labels as well.
"In addition to signing these MRAs with countries with similar schemes, Singapore has been working with industry and government partners to put up a proposal to develop an international standard, ISO 27404, which defines a Universal Cybersecurity Labelling Framework (UCLF) for consumer IoT. The UCLF will serve as a guide for countries that are looking to implement and set up their own labelling schemes for consumer IoT," said Puthicheary.
[12]
"It's easier to use what's out there than recreate the wheel" said Internet of Secure Things (IoXt) Alliance director of operations Grace Burkard during a SICW roundtable discussion.
"We need to be aligned not just to prevent attacks on untested IoT devices, but to fuel innovation," said Burkard. "Without global synchronized IoT standards, IoT doesn't have the runway it needs to evolve." ®
Get our [13]Tech Resources
[1] https://blog.google/technology/safety-security/how-google-is-helping-to-make-the-internet-of-things-more-secure/
[2] https://www.theregister.com/2022/10/03/acronis_founder_smart_devices/
[3] https://www.theregister.com/2022/10/20/cisa_flaws_advantech_hitachi/
[4] https://www.theregister.com/2022/10/19/millennials_gen_z/
[5] https://www.theregister.com/2022/10/19/singapore_international_cyber_week/
[6] https://www.theregister.com/2022/10/19/singapore_international_cyber_week/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y1EcN64VGlv93tlZSH0bfQAAAE8&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[8] https://twitter.com/ashleyrgold/status/1580685081001066496
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y1EcN64VGlv93tlZSH0bfQAAAE8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y1EcN64VGlv93tlZSH0bfQAAAE8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y1EcN64VGlv93tlZSH0bfQAAAE8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y1EcN64VGlv93tlZSH0bfQAAAE8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://whitepapers.theregister.com/
ArrZarr
Out of curiosity, has Biden been holding all of the good legislation for the 6 months before the midterms?
It seems that nothing much was accomplished in the 18 months after he won the presidency then not much happened.
Don't get me wrong, Dems are almost infinitely preferable to whatever scumbag the GOP put forwards, but it just seems like Brandon has spent most of the last 2 years preparing for a dash to important elections.
Brewster's Angle Grinder
They seemed to spend a lot of time wrangling over one or two major bits of legislation. And now that's out the way, smaller legislation is proving less controversial.
Could we stop calling these pieces of junk "smart" devices? This marketing BS makes me puke.
== Bring us Dabbsy back! ==