By Stormi O'Donnell
SecureWorld Media
The Internet of Things (IoT) could also be known as the Internet of Unsecure Things, depending on how you look at it. Security often takes a back seat to the incredible innovation that goes into IoT. However, help is on the way, in form of a new partnership between Underwriters Laboratories and The Department of Homeland Security. During the keynote address at SecureWorld Boston on March 30, Joe Jarzombek, Former Director for Software Assurance US Department of Homeland Security, gave an exclusive look inside the new partnership.
"Beginning in April of 2016, Underwriters Labs is rolling out its cybersecurity assurance program, and what that is, is an independent testing and certification of products, anything that's a network-connectable device," said Jarzombek.
The program will initially focus on two industries, that not only affect the most people, but could also cause the most harm if not secure.
"They're starting with industrial control systems, things that run all of our critical infrastructure, as well as medical devices, two very key areas," Jarzombek stated.
The testing program will not only evaluate the security of the actual product, but also the entire process that goes into securing it. This is vital in making sure that products can sustain long-term security. In a world where new threats are found by the minute, the evaluation of the process ensures that products can evolve as new threats present themselves. Evaluating the entire process will also allow companies to keep their certification as they roll out new updates and versions of the original product.
"It's still to be determined as to what is the shelf-life of that initial certification that you've had, but they're looking at a way that by understanding the product as well as the processes, companies can get that certification on their products," Jarzombek said.
The program is a major step in the right direction when it comes to securing the Internet of Things. Distributors, of course, will be more likely to buy products that come with the security certification. More importantly, the program will ultimately force manufacturers to take security off of the back-burner, and push it into the spotlight before releasing new products.
"And that's really good for the consumer," Jarzombek stated.