ETSI Publish Cyber Security Standard for Consumer IoT
First globally applicable standard for consumer IoT rules out default passwords and requires vulnerability disclosure.
ETSI, the European Standards Organisation have this week released the first globally applicable cyber security standard for consumer IoT devices. The standard, ETSI TS 103 645, establishes a security baseline for internet-connected consumer products and provide a basis for future IoT certification schemes. It builds closely on the UK's Code of Practice for Consumer IoT Security which set out a list of 13 Commitments. The standard focuses on the top three of these which are generally regarded as the highest priority.
The standard requires implementers to forgo the use of universal default passwords, which have been the source of many security issues. It also requires implementation of a vulnerability disclosure policy to allow security researchers and others to report security issues.
Matt Evans, Director of Market Programmes, yesterday said
"Our own research shows thatpoor security is a barrier to greater adoption of Connected Home devices and services. If we are to deliver the very real benefits that IoT can make to people's life's we must address these justified concerns and therefore welcome the publication of the ETSI standard. We encourage companies to engage with both the standard and the UK Government's Code of Practice as these are developed further."
Latest News from
Integrated Review Outlined26/02/2020 14:20:00
The Government has outlined the scope of the Integrated Review of Foreign Policy, Defence, Security and International Development
Open Finance – in the footsteps of Open Banking25/02/2020 16:25:00
The Financial Conduct Authority published a call for inputs on Open Finance, building on the principles of Open Banking, the sharing of data which provides new ways for customers and businesses to engage with their money and make the most of it.
UK and Spanish tech trade associations call for Adequacy Agreement25/02/2020 11:25:00
techUK and Ametic have published a joint paper calling for a Data Adequacy Agreement by the end of the year.
Nominations now OPEN for techUK’s DA/AI Leadership Committee24/02/2020 09:25:00
techUK recently (21 February 2020) opened nominations for members to join its Data Analytics and AI Leadership Committee. After a two-year tenure, the current Committee is due for re-elections.
techUK launches "A Vision for Digital Trade" in Brussels21/02/2020 14:25:00
An overview of techUK's "A Vision for Digital Trade" report.
New £65 million pot of funding for 5G projects21/02/2020 09:38:00
Funding open accelerate the use of 5G in creative industries plus rural 5G announcements.
EU launches a bold new European Strategy for Data20/02/2020 16:05:00
Overview of the European Commission's Communication on 'A European Strategy for Data'.
EU launches digital strategy for the next five years20/02/2020 14:25:00
European Commission President, Ursula von der Leyen, has presented today the Communication “Shaping Europe’s Digital Future”, setting out EU’s digital strategy for the next five years.
The Scottish Budget: What Does It Mean for Tech?20/02/2020 10:10:00
For 2020-2021, Scotland increases investment in digital and tech innovation, infrastructure, and skills.