Australia launches voluntary cyber security labelling pilot for smart devices

The Australian Government has launched the pilot of its Voluntary Security Labelling Scheme for Smart Devices, introducing a cyber security certification label designed to give consumers clear, independently verified information about the security of connected products before they buy them.

Minister for Cyber Security Tony Burke announced the scheme's pilot at the Connecting Technology Summit, marking the programme's transition from the design phase to a trial phase in which real products will be tested by accredited laboratories.

The trial phase will involve the Alliance reviewing and refining assessment methodologies for security certification throughout the pilot.

"Whether it's a smart speaker or robot vacuum cleaner, Australians deserve to know if the devices they are bringing into their homes could be putting them at risk," Burke said.

"The program will also put pressure on manufacturers because they will know cyber security has a value to Australian consumers."

The scheme is being co-developed by the Department of Home Affairs and the Connected Technology Alliance. It aims to let consumers identify and compare the security level of connected products at a glance, with manufacturers' security claims subject to independent verification.

Vendor participants in the pilot include NetComm, Telstra, ASSA ABLOY (Lockwood) and Electrolux. Five testing laboratories - Viden, Securus Consulting Group, Teron Labs, DEKRA and TÜV SÜD - are taking part and have contributed to the development of the scheme's certification rules.

Connected Technology Alliance chair Judy Anderson said the certification label gives consumers a clear way to understand the security credentials of products they are considering, while giving manufacturers an opportunity to demonstrate their smart products' security standing.

"The pilot is the next step towards putting the Scheme into practice and ensuring the assessment process works for both industry and consumers," Anderson said.

"The security certification label gives consumers a clear way to understand the security credentials of the products they are considering, while giving manufacturers an opportunity to demonstrate their smart products’ security credentials."

Australia is an active participant in the Global Cybersecurity Labelling Initiative, an international partnership focused on harmonising cyber security labelling for connected products across a globalised market.