UK Introduces New Cybersecurity Legislation for IoT Devices

guest · Nov 24, 2021

UK Introduces New Cybersecurity Legislation for IoT Devices
November 24, 2021
https://www.infosecurity-magazine.com/news/uk-cybersecurity-legislation-iot/

The UK government has today introduced new legislation to Parliament that aims to better protect consumers’ IoT devices from hackers.

The Product Security and Telecommunications Infrastructure (PSTI) Bill places new cybersecurity standards on manufacturers, importers and distributors of internet-connectable devices, such as phones, tablets, smart TVs and fitness trackers. The legislation will also apply to products that can connect to multiple other devices but not directly to the internet, like smart light bulbs and smart thermostats.
Click to expand...

These requirements include banning universal default passwords, forcing firms to be transparent about actions they are taking to fix security flaws in their products and creating a better public reporting system for any vulnerabilities discovered. In addition, these companies will have a duty to investigate compliance failures, produce statements of compliance and maintain appropriate records of this.

Failure to comply could result in heavy fines issued by a new regulator – up to £10m of 4% of their global turnover, as well as up to £20,000 a day in the case of an ongoing contravention. The regulator will also be given the power to require firms to comply with the security requirements, recall their products or stop selling or supplying them altogether.
Click to expand...

Minister for Media, Data and Digital Infrastructure, Julia Lopez, commented:

“Everyday hackers attempt to break into people’s smart devices. Most of us assume if a product is for sale, it’s safe and secure. Yet many are not, putting too many of us at risk of fraud and theft.
“Our Bill will put a firewall around everyday tech from phones and thermostats to dishwashers, baby monitors and doorbells, and see huge fines for those who fall foul of tough new security standards.”
Click to expand...

Dr Ian Levy, NCSC technical director, stated: “I am delighted by the introduction of this bill which will ensure the security of connected consumer devices and hold device manufacturers to account for upholding basic cybersecurity.
Click to expand...

GOV.UK: The Product Security and Telecommunications Infrastructure (PSTI) Bill - factsheets

The Product Security and Telecommunications Infrastructure (PSTI) Bill supports the rollout of future-proof, gigabit-capable broadband and 5G networks, and better protects citizens, networks and infrastructure against the harms enabled through insecure consumer connectable products.
Click to expand...

The Product Security measures (Part 1 of the Bill) will:

ensure that consumer connectable products, such as smart TVs, internet-connectable cameras and speakers, are more secure against cyber attacks, protecting individual privacy and security;

require manufacturers, importers and distributors to comply with new security requirements relating to consumer connectable products; and

create an enforcement regime with civil and criminal sanctions aimed at preventing insecure products being made available on the UK market.

Click to expand...

kC_ · Nov 24, 2021

zzzzz sureley everyone has iOT devces on their own isolated VLAN ? if not why not?!

Log in or Sign up

UK Introduces New Cybersecurity Legislation for IoT Devices

guest Guest

kC_ Registered Member

Log in or Sign up

UK Introduces New Cybersecurity Legislation for IoT Devices

guest Guest

kC_ Registered Member

Useful Searches