The UK government has announced plans for a new Secure by Design security labelling scheme as part of a new consultation published today. The code of practice calls for security labels to be applied to connected smart devices, informing consumers that basic security measures have been included.
The new code of practice is at this stage voluntary; however, it will become mandatory in the future. Manufacturers and retailers will be responsible for the correct security labelling under the proposals. Manufacturers will need to ensure that their products are secure from the design stage, through to manufacturing, rather than adding security as an afterthought. Retailers will at first be encouraged to only sell labelled devices before a possible ban comes into force on unsecured and unlabelled devices.
“Many consumer products that are connected to the internet are often found to be insecure, putting consumer’s privacy and security at risk.”
Margot James – UK Digital Minister
The stickers will aid consumers by including key information on the device:
What to look for on the security labels:
- Is the device secured with a unique password
- How long will the device receive security updates
- Who to contact if you feel you have been hacked
The following label imagery has been created by Seareach.co.uk based on the guidelines as provided by the Secure by Design Consultation Stage Regulatory Impact Assessment.
These designs are based on the current guidelines, so they are correct. However, they are still undergoing consultation and they may therefore change.
Some of the devices this code would affect include:
- Smart toys, video doorbells, baby monitors and CCTV cameras
- Connected safety products (e.g. smart door bells)
- Smart cameras, TVs and speakers
- Health trackers
- Home automation and security alarms
- Connected appliances (e.g. washing machines, fridges, dishwashers)
- Smart home assistants (e.g. Echo, Alexa, Siri, Google Home)
The code of conduct, developed with the National Cyber Security Centre (NCSC) and others, plans on making sure consumers are better informed about the security of their smart devices and drive best practice for manufacturers. The Internet of Things (IoT) is ever growing, with as many as 40% of homes globally having at least one smart device connected to the internet. As consumers seek new and innovative products, more smart devices are coming to market every day. Consumers face the risk of DDoS attacks, eavesdropping from smart device microphones and cameras; and potential identity theft. The new security labeling scheme will allow consumers to buy with confidence, knowing that the manufacturers and retailers take their security seriously.
Seareach has many years of experience in producing security stickers for OEM, distributors, and retailers. Seareach security labels and asset tags protect a wide range of devices in consumer’s homes, military, and sensitive network systems.
Contact us on +44 (0) 1702 476 286 or info@seareach.co.uk to discuss how we can help your business stay ahead of new regulations and offer your customers the highest security.
