The label is intended to guide consumers in making safer cybersecurity choices when selecting products.
In 2024, The White House introduced a labeling program for internet of things (IoT) devices to help consumers identify household products that comply with government-approved cybersecurity standards.
Known as the Cyber Trust Mark, this label functions similarly to the Energy Star certification for energy-efficient devices. It has been in development for several months, in collaboration with the National Institute of Standards and Technology and the Federal Communications Commission.
The U.S. Cyber Trust Mark graphic was featured at the Consumer Electronics Show (CES) in Las Vegas on Thursday, January 9, 2025 by Deputy National Security Director for Cybersecurity and Emerging Technology Anne Neuberger along with FCC Chairwoman Jessica Rosenworcel.
The presentation detailed plans for the program, including its voluntary nature, the role of the Federal Communications Commission (FCC), and collaboration with industry stakeholders Amazon, Best Buy, Google, LG Electronics USA, Logitech, and Samsung. UL Solutions has been selected to serve as the Lead Administrator and a Cybersecurity Label Administrator (CLA) for the program. Their role involves working with stakeholders to develop recommendations on technical standards, testing procedures, and consumer education efforts.The program is expected to officially commence later in 2025, with the first products bearing the Cyber Trust Mark anticipated to be available by the end of the year.
Eligible products for this certification include a wide range of consumer IoT devices, such as baby monitors, home security cameras, fitness trackers, smart appliances, and other internet-connected devices commonly used in households. The program is voluntary, but it is expected to encourage manufacturers to enhance their cybersecurity measures to meet the established standards.
This announcement shows a strong intent to proceed but it is still in the preparatory phase, with implementation and full approval processes ongoing. While it represents a significant step toward implementing cybersecurity labeling for IoT devices, the program has not yet been fully launched or operationalized.
The mark is expected to play a role in a cybersecurity executive order to be issued this week. Under the order, the federal government will be required to procure devices with the cyber mark by 2027.
Source Material:
White House Press Briefing: White House Launches “U.S. Cyber Trust Mark”, Providing American Consumers an Easy Label to See if Connected Devices are Cybersecure https://www.whitehouse.gov/briefing-room/statements-releases/2025/01/07/white-house-launches-u-s-cyber-trust-mark-providing-american-consumers-an-easy-label-to-see-if-connected-devices-are-cybersecure January 7, 2025
https://www.ces.tech/schedule/us-cyber-trust-mark-getting-ready-for-certification
https://www.fcc.gov/cybersecurity-certification-mark
https://www.ul.com/insights/us-cyber-trust-mark
Nextgov/FCW White House unveils Cyber Trust Mark program for consumer devices by David DiMolfetta, https://www.nextgov.com/cybersecurity/2025/01/white-house-unveils-cyber-trust-mark-program-consumer-devices/401991 JANUARY 7, 2025
