The world is becoming increasingly connected with the rapid growth of ‘smart’ technology in various devices, including televisions, speakers, appliances, locks, exercise trackers, and games. According to Alex Rubert, Sales Manager at SGS Brightsight, a cybersecurity evaluation laboratory network, there were approximately 8.6 billion IoT-connected devices in 2019, which is expected to rise to 15.14 billion in 2023 and reach 29.42 billion by 2030.
However, along with the rise in IoT devices, there has been an increase in cyberattacks. A recent report by Check Point Research (CPR) revealed a 38% increase in attacks between 2021 and 2022, with education, government, and healthcare being the most common targets. These cyberattacks can have severe consequences, such as eavesdropping through smart speakers, compromising life support systems in hospitals, or stealing bank details.
To address these growing concerns, SGS, a global network of testing and certification laboratories for the wireless industry, offers compliance against various global regulations. These regulations include the California Consumer Privacy Act (CCPA), EU General Data Protection Regulation (GDPR), National Institute of Standards and Technology (NIST) Cybersecurity Framework (NISTIR 8259A-NIST 8425), and Australia’s Demand-response Standard AS4755.2.
As the number of IoT devices and cyber threats continues to rise, there is a move towards more regulation. However, implementing new legislation can be slow, leading to a regulatory lag due to the rapid development of technology and threats. Nonetheless, cybersecurity regulation is expected to catch up in 2024.
SGS highlights several new regulations and standards for consumer products that are expected to come into force in the coming months. These include the UK Product Security and Telecommunications Infrastructure (PSTI) Regulation 2023, the US Cyber Trust Mark, the Cybersecurity Labelling Scheme (CLS) for Singapore, the Cyber Resilience Act (CRA) in the EU, and the EU Radio Equipment Directive (RED) Article 3.3.
Manufacturers and importers of IoT devices will need to ensure their products conform to these new regulations and demonstrate compliance in an easily recognizable manner. SGS can assess all products against the required standards, including NIST, RED, and CLS, and issue EU-type certification for products destined for European markets as a Notified Body.
Compliant products can carry the internationally recognized SGS Cybersecurity Mark, indicating the adoption of best practices and conformity to defined standards. These standards include ETSI EN 303 645, NIST IR 8425, UK PSTI, IEC 62443-4-2, ISO 21434, and RED 3.3 (d, e, f).
For more information on Cybersecurity Services, you can visit the link provided.