EU Commission to introduce cyber requirements for Internet of Things products
The proposal for a Cyber Resilience Act that will be presented next week will mandate baseline cybersecurity standards for all connected devices and stricter conformity assessment procedures for critical products.
The proposal is trying to address the widespread vulnerabilities in the booming Internet of Things (IoT) sector, where even the hacking of a single device, the so-called ‘weakest link’, could lead to major spill-over effects to the entire organisation or supply chain. At the same time, users are not provided with sufficient information on the cybersecurity features of a connected device to make an informed choice when buying it.
To address these concerns, the Commission is presenting the first legislation in the world to introduce a legislative framework for all connected devices that would ensure the cybersecurity of these products throughout their entire lifecycle.
Source: LEAK: Commission to introduce cyber requirements for Internet of Things products – EURACTIV.com