Call for Stakeholders: US Cybersecurity Labeling Program for IoT Products – Developing Recommendations for Technical, Labeling and Label Renewal Requirements

UL Solutions is honored to serve as the Lead Administrator for the Federal Communications Commission's (FCC) voluntary U.S. Cybersecurity Labeling Program for consumer wireless IoT products (known as the U.S. Cyber Trust Mark Program), a role which includes the coordination of a 90-day stakeholder engagement process.

As described in the Cybersecurity Labeling for Internet of Things Report & Order, the purpose of the 90-day stakeholder process is to develop a set of recommendations for submission to the FCC. These recommendations must cover:

• the technical standards and testing procedures for the Commission to consider with regard to at least one class of IoT products eligible for the IoT labeling program;
• how often a given class of IoT products must renew their request for authority to bear the FCC IoT label (including the "U.S. Cyber Trust Mark"); and
• the design of the FCC IoT label, including but not limited to labeling design and placement (e.g., size and white spaces, product packaging.)

The Report & Order calls for the technical standards and testing procedures to be based on NISTIR 8425, Profile of the IoT Core Baseline for Consumer IoT Products, and to leverage existing work for efficiency and speed.

As part of the stakeholder engagement process, UL Solutions will convene three committees to address each set of recommendations provided above. At this time UL Solutions is accepting applications for committee members. We encourage stakeholders with experience and expertise in technical standards and testing procedures for IoT products; renewal procedures/market surveillance for labeling programs; or labeling design to apply for the committees. Each committee is expected to consist of 25 to 30 members, representing broad, balanced stakeholder groups. Given the timeline ahead, the application window closes quickly, on January 16, 2025.

If you are interested, please email the following information to [email protected]:

1. Name and contact details (phone and email)
2. Company or Organization you represent
3. Classification of Organization (Producer, Consumer, Government, Retailer/Distributor, General Interest, Testing/Standards Organization)
4. Confirmation that you will be able to attend up to two, one-day meetings within the next three months. The first meeting, which will be focused on developing the technical standards and testing procedures, is tentatively scheduled to take place the week of January 27.
5. Will you attend virtually or in-person? (The meeting location is expected to be either Research Triangle Park, NC or Washington DC)
6. Which committee(s) would you like to participate in? (Technical Requirements, Labeling, Renewal/Surveillance)
7. What experience qualifies you for participation in the committee(s) requested?

Thank you in advance for your interest in the U.S. Cybersecurity Labeling Program for wireless consumer IoT products.