Call us now:
Rachel V. Rose, JD, MBA thank you for sharing. A bit like buses, coming at the same time. This week the EU adopted the text for the EU Cyber Resilience Act (CRA) (https://lnkd.in/e5b2z5fX), setting out the cybersecurity risk management requirements for the creators, manufacturers and distributors of products with digital elements.
In the same week the U.S Federal Communications Commission (FCC) published the proposed U.S Cyber Trust Mark Logo, in conjunction with the FCCs proposed cybersecurity labeling program for smart devices (https://lnkd.in/eFwgaGRP). Aimed at establishing a voluntary program for the labeling of IoT devices, and the development of IoT cybersecurity criteria and standards.
The FCC is seeking comment on the adoption of the baseline NIST recommended IoT criteria, for the proposed labeling program. A baseline that sets out an outcomes based approach to accommodate the breadth of IoT products. Baseline criteria that includes (1) asset identification; (2) product configuration; (3) data protection; (4) interface access control; (5) software update; (6) cybersecurity state awareness; (7) documentation; (8) information and query reception; (9) information dissemination; and (10) product education and awareness.
Coincidence that the U.S and EU communicate their intentions to deliver digital product cybersecurity marking standards at the same time? Further cyber regulations for industry to evaluate and comply with.
Veritas GRC @Thaddeus Dziekanowski Rich Waite, M.Ed. George Sawyer Brian Levine Johnathan Rudy Ryan Buckner
#cybersecurity #cyberriskmanagement #cyberregulation #iotsecurity
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7175075309963112448