The IoT devices, smart homes and connected devices should make our lives easier. That sounds great for everyone and who wouldn't want to remotely adjust the temperature in their apartment via porridge?
Internet-enabled systems and devices are now a major IT security risk. The state of California in the United States is the first in this country to adopt a law (SB-327) on IT security for the IoT (Internet of Things), which has been in effect since January 1, 2020.
This law applies to all devices that are directly or indirectly connected to the Internet and sets a minimum requirement for the IT security of the device.
The SB-327 law obliges manufacturers to ensure adequate security and, above all, not to use default passwords.
MB connect line's interpretation of this law is as follows:
a) have an individual password (certainly not a default password such as admin / admin or similar) or;
b) the user is forced to set a password during commissioning, our systems are supplied with secure individual passwords.
MB connect line meets the devices mbNET, mbNET.rokey and mbNETFIX for 100% to bill SB-327. You can find more information about the security features of our devices here.
Conclusion:
The planned norms and standards, such as IEC 62443, are of international importance and have an increasing influence on future devices and solutions. However, the following still applies:
Safety is not a product, but a process that you must also live. California shows here that you should at least set standards. Minimum requirements, such as regulating secure passwords by law, are in any case not a bad idea.