The UK based IoT Security Foundation (IoTSF) has launched three guides on consumer IoT security designed to help industry comply with voluntary guidelines and legislation being developed by governments. The guides build upon the recently released ETSI EN 303 645 standard on consumer IoT cyber security published in July 2020. It is the first international […]
EC puts consumer IoT under competition scrutiny
The European Commission has launched an antitrust enquiry into consumer IoT products and services, saying market knowledge gained from the enquiry would contribute to its enforcement of competition law in the sector within the European Union. Specifically, the EC said the enquiry would focus on consumer-related products and services that are connected to a network […]
IoTSF makes a case for mandatory IoT security for consumer devices
The IoT Security Foundation says vulnerability reporting is essential to keep consumer IoT products and services safe from intruders, and finds it to be woefully lacking. It has just released the results of a survey of vendors’ vulnerability reporting and disclosure practices saying: “An analysis of 330 consumer IoT device manufacturers has revealed five of […]
Laying down the law on security for consumer IoT
The IoT Alliance Australia (IoTAA) is against mandating security for consumer IoT devices. The UK plans to do just that, with good reason. In November I reported that Australia’s Home Affairs minister, Peter Dutton, had released a for-comment draft of a code of practice that closely follows a voluntary code introduced by the UK Government […]
UK to legislate security for consumer IoT devices
The UK Government is to introduce legislation that, it says, will impose three rigorous security requirements on all consumer IoT devices. Specifically these are: All consumer internet-connected device passwords must be unique and not resettable to any universal factory setting; Manufacturers of consumer IoT devices must provide a public point of contact so anyone can […]
