Tech firms sign up to government's IoT code of practice

HP, Samsung and Centrica Hive first to sign up to voluntary guidelines for Gov's 'Secure by Design'

IoT

Tech firms including HP, Samsung and Centrica Hive are the first to sign up to the UK government's voluntary security guidelines for IoT consumer devices.

Published by Department for Media, Culture and Sport (DCMS), the Code of Practice is a voluntary set of measures to help manufacturers boost the security of internet of things (IoT) devices by ensuring that security is embedded into the design process.

The code is made up of 13 guidelines, laid out in the government's 'Secure by Design' review published by the DCMS and the National Cyber Security Centre (NCSC) in March. Initially, the review was criticised by tech experts for 'lacking teeth' due to it being optional.

However, the code has already received support from high ranking tech firms, such as electronics giant Samsung. The company's director of IoT and SmartThings, Teg Dosanjh said that security and privacy in connected devices were of great importance to consumer trust and that the government's desire to make connected devices as safe and secure as possible was "warmly welcome".

"From smartwatches to children's toys, internet-connected devices have positively impacted our lives but it is crucial they have the best possible security to keep us safe from invasions of privacy or cyber attacks," said Minister for Digital, Margot James.

"The UK is taking the lead globally on product safety and shifting the burden away from consumers having to secure their devices."

James added that pledges by HP and Centrica Hive Ltd were a welcome first step but warned that it was vital other manufacturers followed their lead and ensured strong security measures were built into everyday technology during its design.

By making security a part of the design, tech companies can take the burden of securing devices away from consumers, who would otherwise have to add it on as an extra after purchase.

According to the government, there will be an estimated 420 million internet-connected devices in use across the UK within the next three years and these will range from smart technology, such as phones, TVs and speakers, to more innovative and obscure gadgets like as kettles and fish tanks.

Such devices have been exploited by malicious actors in a number of ways. A recent lab report from Kaspersky found that IoT malware had tripled in the first half of 2018, with attacks such as malicious cryptocurrency mining, DDoS attacks and botnet activities becoming more prevalent and harder for manufacturers to combat.

The government's move was welcomed by the cyber security community, with Duncan Jones, head of research at Thales eSecurity: "This kind of directive from the government, supporting security by design, is crucial to ensuring that our increasingly connected world is secure, and it's excellent to see large-scale tech companies committing to these efforts."

Featured Resources

Virtual desktops and apps for dummies

An easy guide to virtual desktop infrastructure, end-user computing, and more

Download now

The total economic impact of optimising and managing your hybrid multi-cloud

Cost savings and business benefits of accelerating the cloud journey

Download now

A buyer’s guide for cloud-based phone solutions

Finding the right phone system for your modern business

Download now

What’s next for the education sector?

A new learning experience

Download now

Recommended

Cyber attacks against organizations increasing as more staff work from home
cyber security

Cyber attacks against organizations increasing as more staff work from home

17 May 2021
What is phishing?
phishing

What is phishing?

17 May 2021
Cisco to acquire threat intelligence provider Kenna Security
Acquisition

Cisco to acquire threat intelligence provider Kenna Security

14 May 2021
What is the Computer Misuse Act?
Policy & legislation

What is the Computer Misuse Act?

14 May 2021

Most Popular

KPMG offers staff 'four-day fortnight' in hybrid work plans
flexible working

KPMG offers staff 'four-day fortnight' in hybrid work plans

6 May 2021
Hackers use open source Microsoft dev platform to deliver trojans
Security

Hackers use open source Microsoft dev platform to deliver trojans

14 May 2021
How to move Windows 10 from your old hard drive to SSD
operating systems

How to move Windows 10 from your old hard drive to SSD

30 Apr 2021