UK government published security requirements for IoT devices
UK Department for Digital, Culture, Media, and Sport (DCMS), issued new security requirements for IoT devices based on last year’s public consultation. According to these requirements: (1) all consumer IoT devices passwords must be unique and not resettable to any universal factory setting; (2) IoT manufacturers must provide a public point of contact so anyone can report a vulnerability and it will be acted on in a timely manner and (3) IoT manufacturers must explicitly state the minimum length of time for which the device will receive security updates at the point of sale, either in-store or online. This move follows the 2018 Code of Practice for consumer IoT security issued by the DCMS last year.
About author
DW Team
The GIP Digital Watch Observatory team, consisting of over 30 digital policy experts from around the world, excels in the fields of research and analysis on digital policy issues. The team is backed by the creative prowess of Creative Lab Diplo and the technical expertise of the Diplo tech team.