NOV 23, 2020 | US
After Years of Work, Congress Passes ‘Internet of Things’ Cybersecurity Bill — And It’s Kind of a Big Deal
CyberScoop, November 23, 2020
By Tim Starks
Congress last week did something that it rarely does: It passed a meaningful cybersecurity bill. The measure would direct the Commerce Department’s National Institute of Standards and Technology to establish baseline security requirements for any IoT manufacturer that wishes to contract with the federal government, in areas such as patching or identity management. The bill also would require contractors to implement vulnerability disclosure policies.
Absent government action, some researchers and consumer advocates had already experimented with security labeling for IoT devices.
The federal government doesn’t break out its spending on IoT devices, but outside assessments estimate that it spends billions each year, with more to come. But its purchasing influence is only part of the potential leverage the bill brings to bear.
“There will still be IoT manufacturers who don’t sell to the government that may be able to continue to ignore some of these baseline practices,” said Tommy Ross, director of public policy for The Software Alliance, a technology industry group. “I think they will come under increasing scrutiny given that the US government will now be saying these are the baseline practices we expect for any IoT device.”
Original Posting: https://www.cyberscoop.com/congress-iot-cybersecurity-bill-contractors/
ÜBER BSA
BSA | The Software Alliance (www.bsa.org) ist die globale Stimme der Software-Industrie gegenüber Politik und Wirtschaft. Die Mitglieder der BSA gehören zu den innovativsten Unternehmen weltweit und erarbeiten neue Software-Lösungen, die die Wirtschaft antreiben und das moderne Leben von heute prägen.
Die BSA mit Hauptsitz in Washington, D.C., und Niederlassungen in über 30 Ländern weltweit leistet Pionierarbeit in der Schaffung von Programmen zur Einhaltung und Durchsetzung geistiger Eigentumsrechte und der Einführung von Richtlinien, auf deren Basis technologische Innovationen und die digitale Wirtschaft gefördert werden.