Sen. Markey, Rep. Lieu introduce legislation to create Internet of Things cybersecurity certification program

Sen. Edward J. Markey (D-MA) and Rep. Ted W. Lieu
(D-CA) recently introduced bicameral legislation that would create a voluntary cybersecurity certification program for Internet of Things (IoT) devices.

“The IoT will also stand for the Internet of Threats unless we put in place appropriate cybersecurity safeguards,” Markey said. “With as many as 50 billion IoT devices projected to be in our pockets and homes by 2020, cybersecurity will continue to pose a direct threat to economic prosperity, privacy, and our nation’s security. By creating a cybersecurity certification program, the Cyber Shield Act will help ensure consumers can reliably identify more secure products and rewards manufacturers that adopt the best cybersecurity practices.”

The Cyber Shield Act would create an advisory committee of cybersecurity experts to establish benchmarks for cybersecurity and data security aspects of IoT devices. IoT manufacturers could choose to apply for the certification.

“Our goal should be establishing IoT device best practices that are understood by both consumers and manufacturers,” Shane Tews, visiting fellow at the American Enterprise Institute, said. “Sen. Ed Markey has proposed an Energy Star-like program that would create a voluntary cyber and data security certification program named Cyber Shield. This will help consumers identify responsible manufacturers who adhere to agreed-upon cyber and data practices.”