Legislation targets IoT cybersecurity

Sen. Edward J. Markey (D-MA) and Rep. Ted W. Lieu (D-CA) recently introduced a measure they said would create a voluntary cybersecurity certification program for Internet of Things (IoT) devices.

The Cyber Shield Act would establish an advisory committee of cybersecurity experts from academia, industry, consumer advocates, government, and the public to create cybersecurity benchmarks for IoT devices.

“The IoT will also stand for the Internet of Threats until we put in place appropriate cybersecurity safeguards,” Markey said. “With more than 60 billion IoT devices projected to be in our pockets and homes by 2025, cybersecurity continues to pose a direct threat to economic prosperity, privacy, and our nation’s security.”

Markey said a cybersecurity certification program would give consumers a seal of approval for more secure products and encourage manufacturers to adopt the best cybersecurity practices so they can compete in the marketplace for safety.

“I’m a recovering Computer Science major, so I recognize that advancements in technology have improved lives and our world,” Lieu said. “That said, we can’t ignore data security while we encourage technological advancement in every sector of our lives. It’s a win-win for consumers and for businesses who prioritize the privacy and security of their customers.”

Susan Grant, director of Consumer Protection and Privacy, Consumer Federation of America, said the agency hopes the Cyber Shield Act labeling program would provide manufacturers with incentives to produce internet-connected products that meet good security standards and help consumers identify those products online and on the store shelves.