» AS PART OF NATIONAL Home Security Month , Michelle Kradolfer , the Secured by Design National Manager looks at the use of smart products in the home and the risks that they can pose .

When you think of traditional home security , the first products that probably come to mind are burglar alarms , security lighting , CCTV and deadbolts . But security products have evolved to now include smart security cameras , video doorbells , locks , plugs and bulbs to name but a few .

In 2021 Which ? undertook a study to look at how a smart home could be at risk from hackers , setting up their own smart home . This detected more than 12,000 scanning or hacking attempts in a single week . Without the appropriate levels of security , any internet connected device or app is at risk of being readable , recognisable , locatable , and / or controllable via the internet , thus providing cyber criminals with the ‘ key ’ in accessing and stealing personal data . This can then be used for a multitude of criminal purposes , including burglary , theft , blackmail , harassment and stalking .

The Secure Connected Device accreditation is the only way for companies to obtain police recognition for the security of their IoT products in the UK .

Some smart locks even let you create ‘ virtual keys ’ so friends and family can enter the home when you ’ re not there and many cameras can be trained to recognise familiar faces and alert you to strangers . However , accessing your device like this can make it easier for other people online to access them without your permission , so make sure you have changed default passwords and enabled Two Step Verification ( 2SV ) if available . 2SV provides a way of ‘ double checking ’ that you really are the person you are claiming to be , and makes it much harder for criminals to access your online accounts , even if they know your password .

You must also make sure your Wi-Fi router has a unique password as this is an easy access point for the cyber criminal to get on to your “ home network .

Many apps and smart devices use what is known as “ shadow IT ”. This is where a device piggy-backs or shadows the capabilities of another enabled app . It is therefore

important that you check the functionality that you permit . For example , do not accept “ location tracking ” where it is not necessary for your specific purpose ; do not share your “ contacts ” to apps that aren ’ t specifically for your communications .

It is also important to remember that if you link your smart devices to Alexa or other ‘ virtual assistants ’, any voice can activate them , even from outside if they shout loud enough !

Secure Connected Device accreditation for IoT products

The Product Security and Telecommunications Infrastructure Act 2022 has been enacted into law , requiring manufacturers , importers and distributors to ensure that minimum security requirements are met in relation to consumer connectable products available in the UK . compliance with this law is required by 29th April 2024 .

The national police security initiative , Secured by Design ( SBD ), launched the Secure Connected Device

accreditation scheme in response to the pending legislation for IoT products . The SBD Secure Connected Device accreditation scheme has been developed in consultation with the Department for Science , Innovation and Technology ( DSIT ), who support industry schemes which help consumers make better informed choices when buying connectable devices .

The SBD Secure Connected Device IoT Device Assessment identifies the level of risk associated with an IoT device and its ecosystem , providing recommendations on the appropriate certification routes with one of the SBD approved certification bodies . Once third-party testing and independent certification for a product has been achieved , the company can apply to become SBD members , with the product receiving the SBD ’ s Secure Connected Device accreditation , a unique and recognisable accreditation that will highlight products as having achieved the relevant IoT standards and certification .

www . securedbydesign . com / secure-connected-devices

40 OCTOBER 2023

locksmithjournal . co . uk