Finland becomes the first European country to certify safe smart devices – new Cybersecurity label helps consumers buy safer products
Information security now!
The Finnish Transport and Communications Agency Traficom has today launched a Cybersecurity label. The label guarantees to consumers that the labelled devices have basic information security features. The Cybersecurity label can be awarded to networking smart devices if the devices meet the certification criteria, which are based on EN 303 645. With the label, Traficom aims to raise consumer awareness of information security and the safe use of connected devices.
As smart homes are becoming increasingly common, more and more devices are connected to the internet and the data transmitted by these devices is used for various services. Because these devices also collect data on their users, their information security features play an increasingly important role. When smart TVs, smartphones, toys and other connected devices in the home network are secure, users can avoid the risk of data abuse, hacking or data leaks.
In autumn 2019, Traficom studied consumers’ attitudes and wishes related to the purchase and use of smart devices.* One of the key findings was that every other Finnish person is concerned about the information security in smart devices, and two in three find it very important that there is easy to understand information available on the information security of devices.
“The security level of devices in the market varies, and until now there has been no easy way for consumers to know which products are safe and which are not. The Cybersecurity label launched today is a tool that makes purchase decisions easier by helping consumers identify devices that are sufficiently secure,” says Director Jarkko Saarimäki from the National Cyber Security Centre Finland (NCSC-FI) at Traficom.
Pilot projects with Cozify, DNA and Polar
The active development of the Cybersecurity label began at the end of 2018. The label was developed in a pilot project led by the NCSC-FI in collaboration with Cozify Oy, DNA Plc and Polar Electro Oy. The first Cybersecurity labels have now been awarded to the products of these companies. The label was awarded in November to the Cozify Hub for smart homes, DNA’s Wattinen smart heating system and the Polar Ignite fitness smartwatch.
“We are promoting the Cybersecurity label in our campaign with the theme ‘buy smart, not blind’. We are hoping that consumers will learn to recognise the label and actively look for it when selecting products and services. At the same time, we will contribute to the increased availability of secure devices in the market. We hope that as many manufacturers as possible want to certify their products. Our goal is that in a few years most home electronics categories will include products with the Cybersecurity label,” Saarimäki says.
European pioneer in security labels
The information security of smart devices is a global challenge, and several initiatives have been launched in Europe to improve their security. Finland is the first country to start granting information security certificates to devices that pass the required tests. The Cybersecurity label launched today makes Finland one of the top European countries to promote the security of smart devices.
The Finnish Cybersecurity label has been designed to tackle the challenges consumers face as smart devices are becoming increasingly common in homes. The products that have been granted the label also have good chances of being awarded other European smart device certificates in the future,” says Chief Specialist Juhani Eronen from Traficom.
Tietoturvamerkki.fi lists all products with the Cybersecurity label
Finding products that have been awarded the Cybersecurity label is easy. The new website tietoturvamerkki.fi serves both consumers and companies wishing to have their products certified. The website lists all products that have been awarded the Cybersecurity label and provides basic information about the label. The website also explains to businesses how they can apply for the label.
*The consumer survey was carried out by IRO Research Oy for Traficom. A total of 1000 interviews with Finns aged 15 years or older were conducted for the survey. The interviews were conducted in a consumer panel in August 2019.
Saana Seppänen, Senior Specialist, NCSC-FI at Traficom, tel. +358 29 539 0485, firstname.lastname@example.org
Cozify Oy, Kimmo Ruotoistenmäki, tel. +358 40 352 88 98, email@example.com
DNA Oyj, Mikko Lietsalmi, tel. +358 44 044 8000, firstname.lastname@example.org
Polar Electro Oy, Marco Suvilaakso, tel. +358 40 7533176, email@example.com
The National Cyber Security Centre Finland (NCSC-FI) at Traficom has developed a certification process for the Cybersecurity label. Receiving the right to use the label requires that products meet the criteria set by the NCSC-FI. This will be verified by testing the devices.
The requirements are based on a draft standard issued by the European standards organisation ETSI EN 303 645. The ETSI criteria have been adapted to meet the specific needs posed by security threats concerning consumer devices. The Cybersecurity label requirements are also designed to comply with a wide range of national and international requirements and recommendations. This helps ensure that the work required for the label can also be applied in other environments at the international level.