Navigating the galaxy of domestic IoT security standards, legislation and codes
summary
A landscape of overlapping schemes includes the UK PSTI (already enforced), the EU Cyber Resilience Act (CRA), and Australia’s law that adopts the top three of ETSI EN 303 645 (Australia adopts the 2023 version not 2024), while the US has no federal law yet but runs a contested Cyber Trust Mark labeling program. Certification trademarks are registered across EU, UK, US, Australia and Singapore, registrations take three to five years, labels use a live QR code and certifications can be suspended or revoked for new vulnerabilities.
AI-written summary · about
chapters (9)
- 0:00IoT security regulation intro
- 3:59IoT security standards overview
- 6:29Domestic vs global schemes
- 8:59Stakeholders and roles
- 10:23Navigation strategies
- 12:30Consumer awareness programs
- 14:14Enforcement and conformity
- 15:37Global certification frameworks
- 16:17Conclusion
related talks
51mThe US National Cyber Label Program for Consumer Connected Devices
12mIoT Security Regulation Overload? Your Guide to PSTI, NIS2, & CRA Compliance
49mPut A Label on It! Protecting IoT by Empowering Consumers
59mMerging Security and Compliance: Perspectives on Emerging Regulations and Best Practices
27mIoT: What will security standards and certification look like ten years from now?
11mNavigating the EU RED IoT Security Maze: Standards, Compliance, and Hurdles
43mThe Hacker's Guide to Policyland
22mEU Cyber Resilience Act - A Product Owner’s Approach