The National Cyber Security Centre Finland under Traficom opens their Cybersecurity Label certification process to commercial operators

The consumer survey that Traficom commissioned in spring 2021 shows that a slightly higher proportion of consumers is aware that unsecured smart devices connected online can share data to external parties without permission. Now almost 80% of Finns are aware of the risks related to smart devices. The proportion has grown steadily since 2019 when it was below 70%. Nearly 45% of respondents indicate that an information security label on smart devices would affect their purchase decisions.

Traficom launches the Cybersecurity Label certification process to commercial operators

Until now, the National Cyber Security Centre Finland under Traficom has been solely responsible for the inspection of smart devices. At the moment, Traficom wants to significantly increase the number of products with the Cybersecurity Label in the market and simplify the inspection process for companies.

Starting from spring 2021, Traficom has granted commercial companies the opportunity to perform the technical inspections required for the Cybersecurity Label. However, Traficom still awards the Cybersecurity Label and ensures that the related requirements are met.

Traficom wants to make selecting secure devices easy for consumers.

"Many consumers find it difficult to find out about features related to information security, which is why a visual information security label on smart devices makes the choice easier for consumers. Therefore, it is important that we can now increase the number of products with the Cybersecurity Label in shops.  I wish both device manufacturers and consumers paid at least as much attention to the information security features of smart devices as they do to their other features," states Jukka-Pekka Juutinen, Director, Information Security Phenomena and Development, National Cyber Security Centre Finland.

The first commercial cybersecurity inspection completed as result of Nordic collaboration

Traficom piloted the outsourcing of the inspections in the spring, and the pilot was successfully completed just before summer. The first outsourced inspection was completed by Nemko, a company that is based in Norway and operates in international markets. 

"Nemko had a very good experience working with Traficom during the successful process that led to the granting of the Finnish Cybersecurity Label to Datek's Home Hub. The similarities in Traficom's and Nemko's approach to IoT security certification helped in the process. Nemko sees the Finnish scheme as an important part of the international cooperative work of ensuring connected consumer products being secure," says Geir Hørthe, Certification Manager at Nemko.

As result of this Nordic collaboration, the Cybersecurity Label was granted to Datek's Home Hub that connects and controls smart home devices. Datek is Telia's Nordic IoT partner. Datek was pleased that the Cybersecurity Label was granted to their product and stressed the importance of international collaboration in improving the information security of smart devices. 

"Datek and our partner in Finland, Telia, are very pleased with the way our certification from Nemko was transferred and augmented with the Finnish Cybersecurity Label. Our hope as a manufacturer moving forward are common cybersecurity certifications and harmonised regulations and standards across the EU and even globally. Nemko and Traficom are in the forefront of this effort and have shown that cybersecurity certifications can be transferred between countries. Hopefully, more will follow in their footsteps," says Espen Westgaard, Chief Information Security Officer at Datek.