The PSTI act (Product Security and Telecommunications Infrastructure Act), aims to raise standards for manufacturers of smart (internet connected) devices, requiring them to offer a minimum level of security against cyber threats. Starting April 29th 2024, producers of consumer smart devices are required to adhere to the new law.
The law means manufacturers must ensure that all their smart devices meet basic cyber security requirements. Specifically:
The manufacturer must not supply devices that use default passwords, which can be easily discovered online, and shared.
The manufacturer must provide a point of contact for the reporting of security issues.
The manufacturer must state the minimum length of time for which the device will receive important security updates.
The law will apply to manufacturers of common smart home devices, including smart doorbells, cameras and thermostats.
More Information:
https://www.ncsc.gov.uk/blog-post/smart-devices-law
https://thehackernews.com/2024/04/new-uk-law-bans-default-passwords-on.html
Related Posts
