Global Certification Forum launches new accreditation initiative for Consumer IoT Security

The Global Certification Forum (GCF) has launched a consumer IoT security accreditation programme which is apparently available to any consumer IoT product manufacturer, regardless of membership status within the GCF ecosystem. GCF told IncisorTV that the new programme will ensure that products comply with requirements specified by the industry, specifically the recently released ETSI EN 303 645 standard for cybersecurity, which is designed to prevent ongoing, large-scale attacks on consumer IoT products. Internet-connected products that will benefit from this step in advancing baseline security and privacy include, for example, smart door locks, TVs, wearables, connected home automation and appliances, as well as connected toys and baby monitors.

GCF claims to have been working closely with its partners to ensure that the industry actively addresses all aspects of security in this market to keep pace with the evolution of the technology. Certification is an extremely important step in the process of improving security, although standards and testing requirements are still in the early stages of adoption and enforcement. The new initiative offers a streamlined process that provides the manufacturer with the ability to self-accredit by filling out a security compliance declaration for any consumer IoT product, not just those supporting 3GPP technologies. The three main security provisions requiring compliance initially cover: no universal default passwords, implementing a means to manage reports of vulnerabilities and keeping software updated, with further provisions to be added as industry adoption proliferates.