{"id":5673,"date":"2023-08-16T08:00:09","date_gmt":"2023-08-16T12:00:09","guid":{"rendered":"https:\/\/solutionsreview.com\/network-monitoring\/?p=5673"},"modified":"2023-08-21T10:00:36","modified_gmt":"2023-08-21T14:00:36","slug":"us-cyber-trust-mark-vs-eu-cyber-resilience-act","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/","title":{"rendered":"US Cyber Trust Mark VS EU Cyber Resilience Act"},"content":{"rendered":"

\"US<\/p>\n

Solutions Review\u2019s\u00a0Contributed Content Series<\/u><\/a> is a collection of contributed articles written by thought leaders in enterprise software categories. Carsten Gregersen of Nabto<\/a> examines the US Cyber Trust Mark, the EU Cyber Resilience Act, and what they both mean for IoT security.<\/strong><\/em><\/p>\n

Finally, cybersecurity rules are coming to the Internet of Things (IoT). Following a decade of simultaneous endpoint and hacker growth, minimum cybersecurity thresholds will soon be in place for device vendors on either side of the Atlantic.<\/p>\n

Last month, The Biden Administration announced The Cyber Trust Mark, a consumer checkmark for digital products that meet required thresholds. Meanwhile, European leaders are currently debating The Cyber Resilience Act, legislation that will enshrine strong cybersecurity into law.<\/p>\n

But what impact will these rules have on device creators and consumers? And what differs between each jurisdiction? Let\u2019s explore.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

The US Cyber Trust Mark: Earning Consumer Trust With A Checkmark<\/strong><\/h3>\n

Let\u2019s start with The United States. The proposed voluntary cybersecurity labeling program intends to help Americans more easily choose smart devices that are safer and less vulnerable to cyber-attacks. Earning the government-backed checkmark \u2013 which will appear on approved products in the form of a shield logo \u2013 requires vendors to stick to tried-and-tested minimum thresholds for the first time. For example, the program will only give the tick of approval to vendors who create products with unique and strong passwords, data protection, software updates, and incident detection capabilities.<\/p>\n

Such a move is overdue. IoT consumers have preferred cheaper connected products for the preceding ten years. As a result, vendors sacrificed strong cybersecurity in the race for the lowest price \u2013 and elements like always-on cloud features and default passwords became the norm. Today, with the smart home and modern office increasingly operating with connected devices, attack surfaces are more vulnerable than ever.<\/p>\n

The idea is that consumers will vote with their wallets and back this checkmark. Much like a pre-vetting service, users will know that the devices have been assessed beforehand and reached government-defined requirements. And, with major industry players from Amazon to Samsung already backing the program, products without the checkmark will lose confidence in the eyes of the buyer. Therefore, the American approach is to hit device vendors where it hurts \u2013 their bottom line.<\/p>\n

The Cyber Resilience Act: Regulating Norms and Penalizing Rulebreakers<\/strong><\/h3>\n

In Europe, lawmakers are bolstering cybersecurity with regulation. Facing many of the same poor connected devices, The Cyber Resilience Act is a line in the sand that introduces cybersecurity requirements for products with digital elements. This includes establishing a comprehensive framework for hardware and software producers, promoting transparency in security practices, and guaranteeing secure products for consumers. Further, the regulators are also looking to ban the sale of products known to have vulnerabilities.<\/p>\n

This is a much further-reaching set of rules compared to the US. Under the proposal announced last September, hardware and software creators will be required to conduct regular vulnerability tests. Meanwhile, European member states will create market surveillance bodies and ensure compliance. And those found non-compliant could face severe penalties. National authorities could impose fines of up to \u20ac10M for IoT device-makers, or up to 2 percent of their worldwide annual turnover.<\/p>\n

Of course, not everyone is happy with this regulation. The open-source community, for example, fears the wording of \u201cdigital elements\u201d is too broad. They claim the draft act will have a \u201cchilling effect\u201d on software development and, if passed, regulate more than 70 percent of the continent\u2019s software without an in-depth consultation. This translates into more than \u20ac100 billion in economic impact under threat. The good news is that open-source is willing to work with regulators to improve cybersecurity without limiting innovation. Let\u2019s hope regulators answer the call.<\/p>\n

The Similarities, Differences, And What\u2019s Next<\/strong><\/h3>\n

These starkly different approaches are emblematic of each region and its attitudes toward business. Europe is regulating top-down (imposing cybersecurity minimums with hefty fines), while the U.S. bottom-up (incentivizing device makers to change their ways with a government-backed consumer label). One offers device-makers a carrot while the other brandishes a stick.<\/p>\n

In both cases, though, action is necessary to establish a cybersecurity code in the respective context, especially as IoT becomes a $1 trillion global market. There\u2019s no right or wrong way– the important part is to create a pathway toward improved cybersecurity. In my view, both approaches achieve this.<\/p>\n

It\u2019s now up to vendors to play ball. They must improve their cybersecurity today to lead the market tomorrow. One way to achieve this is with an IoT platform provider. Instead of going it alone, vendors can turn to established players who tailor communications and deliver encrypted, private, and secure devices.<\/p>\n

Ultimately, vendors can no longer encourage dodgy devices that assist bad actors. Thankfully, consumers and regulators are realizing this is a big issue as devices grow in societal import. Let\u2019s look forward to digital defenses in this sector changing drastically and for the better.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

Solutions Review\u2019s\u00a0Contributed Content Series is a collection of contributed articles written by thought leaders in enterprise software categories. Carsten Gregersen of Nabto examines the US Cyber Trust Mark, the EU Cyber Resilience Act, and what they both mean for IoT security. Finally, cybersecurity rules are coming to the Internet of Things (IoT). Following a decade […]<\/p>\n","protected":false},"author":825,"featured_media":5674,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1,21],"tags":[],"acf":[],"yoast_head":"\nUS Cyber Trust Mark VS EU Cyber Resilience Act<\/title>\n<meta name=\"description\" content=\"Carsten Gregersen of Nabto examines the US Cyber Trust Mark, the EU Cyber Resilience Act, and what they both mean for IoT security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"US Cyber Trust Mark VS EU Cyber Resilience Act\" \/>\n<meta property=\"og:description\" content=\"Carsten Gregersen of Nabto examines the US Cyber Trust Mark, the EU Cyber Resilience Act, and what they both mean for IoT security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Network Monitoring Vendors, Software, Tools and Performance Solutions\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-16T12:00:09+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-21T14:00:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/08\/US-Cyber-Trust-Mark-VS-EU-Cyber-Resilience-Act.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Carsten Gregersen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Carsten Gregersen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/\",\"name\":\"US Cyber Trust Mark VS EU Cyber Resilience Act\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/08\/US-Cyber-Trust-Mark-VS-EU-Cyber-Resilience-Act.jpg\",\"datePublished\":\"2023-08-16T12:00:09+00:00\",\"dateModified\":\"2023-08-21T14:00:36+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/9a4c53b582166dd347fd87574218b0ea\"},\"description\":\"Carsten Gregersen of Nabto examines the US Cyber Trust Mark, the EU Cyber Resilience Act, and what they both mean for IoT security.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/08\/US-Cyber-Trust-Mark-VS-EU-Cyber-Resilience-Act.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/08\/US-Cyber-Trust-Mark-VS-EU-Cyber-Resilience-Act.jpg\",\"width\":800,\"height\":400,\"caption\":\"US Cyber Trust Mark\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/network-monitoring\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"US Cyber Trust Mark VS EU Cyber Resilience Act\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#website\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/\",\"name\":\"Best Network Monitoring Vendors, Software, Tools and Performance Solutions\",\"description\":\"Solutions Review Network Monitoring\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/network-monitoring\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/9a4c53b582166dd347fd87574218b0ea\",\"name\":\"Carsten Gregersen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9325a9b92a9c5cdcdb668bf430e5f90e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9325a9b92a9c5cdcdb668bf430e5f90e?s=96&d=mm&r=g\",\"caption\":\"Carsten Gregersen\"},\"description\":\"Carsten Rhod Gregersen, the founder of Nabto, is an IoT expert with more than two decades in software and innovation. He is a regular tech commentator with features in TechRadar, The New Statesman, and others.\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/author\/carsten\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"US Cyber Trust Mark VS EU Cyber Resilience Act","description":"Carsten Gregersen of Nabto examines the US Cyber Trust Mark, the EU Cyber Resilience Act, and what they both mean for IoT security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/","og_locale":"en_US","og_type":"article","og_title":"US Cyber Trust Mark VS EU Cyber Resilience Act","og_description":"Carsten Gregersen of Nabto examines the US Cyber Trust Mark, the EU Cyber Resilience Act, and what they both mean for IoT security.","og_url":"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/","og_site_name":"Best Network Monitoring Vendors, Software, Tools and Performance Solutions","article_published_time":"2023-08-16T12:00:09+00:00","article_modified_time":"2023-08-21T14:00:36+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/08\/US-Cyber-Trust-Mark-VS-EU-Cyber-Resilience-Act.jpg","type":"image\/jpeg"}],"author":"Carsten Gregersen","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Carsten Gregersen","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/","url":"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/","name":"US Cyber Trust Mark VS EU Cyber Resilience Act","isPartOf":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/08\/US-Cyber-Trust-Mark-VS-EU-Cyber-Resilience-Act.jpg","datePublished":"2023-08-16T12:00:09+00:00","dateModified":"2023-08-21T14:00:36+00:00","author":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/9a4c53b582166dd347fd87574218b0ea"},"description":"Carsten Gregersen of Nabto examines the US Cyber Trust Mark, the EU Cyber Resilience Act, and what they both mean for IoT security.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/#primaryimage","url":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/08\/US-Cyber-Trust-Mark-VS-EU-Cyber-Resilience-Act.jpg","contentUrl":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/08\/US-Cyber-Trust-Mark-VS-EU-Cyber-Resilience-Act.jpg","width":800,"height":400,"caption":"US Cyber Trust Mark"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/network-monitoring\/us-cyber-trust-mark-vs-eu-cyber-resilience-act\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/network-monitoring\/"},{"@type":"ListItem","position":2,"name":"US Cyber Trust Mark VS EU Cyber Resilience Act"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#website","url":"https:\/\/solutionsreview.com\/network-monitoring\/","name":"Best Network Monitoring Vendors, Software, Tools and Performance Solutions","description":"Solutions Review Network Monitoring","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/network-monitoring\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/9a4c53b582166dd347fd87574218b0ea","name":"Carsten Gregersen","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9325a9b92a9c5cdcdb668bf430e5f90e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9325a9b92a9c5cdcdb668bf430e5f90e?s=96&d=mm&r=g","caption":"Carsten Gregersen"},"description":"Carsten Rhod Gregersen, the founder of Nabto, is an IoT expert with more than two decades in software and innovation. He is a regular tech commentator with features in TechRadar, The New Statesman, and others.","url":"https:\/\/solutionsreview.com\/network-monitoring\/author\/carsten\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts\/5673"}],"collection":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/users\/825"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/comments?post=5673"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts\/5673\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/media\/5674"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/media?parent=5673"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/categories?post=5673"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/tags?post=5673"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}