On July 18, the FCC introduced a proposal for internet-enabled devices, also referred to as "smart devices" or the "internet of things," to be eligible for a voluntary "U.S. Cyber Trust Mark". The U.S. Cyber Trust Mark program would fall under the FCC's authority to regulate wireless devices and would use criteria from the National Institute of Standards and Technology (NIST), which established the cybersecurity framework and standards for the federal government. The goal of U.S. Cyber Trust Mark is to encourage manufacturers to improve cybersecurity standards, and to ensure consumers have clear information about smart devices and can easily identify trustworthy products.
If the FCC elects to advance the draft proposal, it will draft a proposed rule, and the public will have an opportunity to provide comments. "The proposal seeks input on issues including the scope of devices for sale in the U.S. that should be eligible for inclusion in the labeling program, who should oversee and manage the program, how to develop the security standards that could apply to different types of devices, how to demonstrate compliance with those security standards, how to safeguard the cybersecurity label against unauthorized use, and how to educate consumers about the program." If the proposed rule is approved, the U.S. Cyber Trust Mark program could be "up and running" by late 2024.