Signal PSTI Act requires minimum security for consumer connected devices

Summary

The UK Product Security and Telecommunications Infrastructure Act has made minimum security standards mandatory for consumer connected devices in the UK. The report credits the measure with reducing device vulnerability and protecting consumers and businesses. Further standards and codes of practice covering apps, AI and software give companies a framework for building security into products by design before they reach users. The report sees the Internet of Things as adding vulnerabilities and argues that, while consumer device security has improved through legislation, enterprise devices also need attention. Over the longer term, there is also concern that offenders could hack Internet of Things devices and GPS software to track their targets.