The federal government is rolling out a consumer labeling system designed to help Americans pick smart devices that are less vulnerable to hacking.
Under the voluntary program, called the US Cyber Trust Mark Initiative, manufacturers can affix the label on their products if they meet federal cybersecurity standards. The types of devices that can seek to carry the label include baby monitors, home security cameras, fitness trackers, refrigerators and other internet-connected appliances.
The labels will include a distinctive shield logo as well as QR codes that consumers can scan for more information about the security of the device. Products bearing the label should be available this year, once manufacturers begin submitting their devices for approval, said deputy national security adviser Anne Neuberger, who briefed reporters on the new program Tuesday.
“It gives consumers an easy way to check if a home alarm system or baby monitor is cyber safe,” Neuberger said, noting that the average American household now has 21 devices that are connected to the internet — each presenting a possible entry point for cybercriminals.
Amazon, Best Buy, Google, LG Electronics USA, Logitech and Samsung are among industry participants.
Even though it’s voluntary, the program will help consumers know which brands to trust — by clicking on the QR code, they’ll be able to access even more information about cybersecurity, including whether the manufacturer provides software updates to protect against new cyberthreats, according to Justin Brookman, director of technology policy at Consumer Reports.
First proposed by the Biden administration 18 months ago, the labels were approved last year by the Federal Communications Commission, the agency tasked with leading the program. Last month, the FCC selected 11 companies and organizations to oversee the technical designation of products bearing the labels.
Officials compare the labels to the Energy Star program, which rates appliances’ energy efficiency, and say the idea is to give consumers more information about the products they buy while also encouraging manufacturers to enhance their cybersecurity.
The proliferation of so-called smart devices has coincided with growing cybercrime in which one insecure device can often give cyberintruders a dangerous foothold on a home network.
Related: CISA Introduces Secure-by-design and Secure-by-default Development Principles
Related: Federal Push for Secure-by-Design: What It Means for Developers
