New voluntary Code of Practice for IoT security

The Australian government released a voluntary Code of Practice last week to improve the security of the Internet of Things (IoT) in Australia – including everyday devices such as smart fridges, smart televisions, baby monitors and security cameras.

Minister for Home Affairs Peter Dutton said cyber security has never been more important to Australia’s economic prosperity.

“Internet-connected devices are increasingly part of Australian homes and businesses and many of these devices have poor security features that expose owners to compromise,” Mr Dutton said. “Manufacturers should be developing these devices with security built in by design. Australians should be considering security features when purchasing these devices to protect themselves against unsolicited access by cybercriminals.”

Minister for Defence Senator the Hon Linda Reynolds CSC said the Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) has today also released quick and easy tips to help Australian consumers protect themselves against cyber threats when buying and using internet-connected devices.

The Code of Practice is a key deliverable as part of the 2020 Cyber Security Strategy and has been developed in close partnership with industry following nation-wide consultation earlier this year. It outlines the cyber security features the Government expects of internet-connected devices available in Australia.

The Code of Practice also aligns and builds upon guidance provided by the United Kingdom, and is consistent with other international standards.

A copy of the Code of Practice is available at www.homeaffairs.gov.au/codeofpractice

The ACSC’s Tips to secure your Internet of Things device is available at www.cyber.gov.au/acsc/view-all-content/advice/internet-things-devices

The ACSC’s guidance for manufacturers is available at www.cyber.gov.au/acsc/view-all-content/publications/how-implement-iot-code-practice-guidance-manufacturers