Today, Public Knowledge endorsed the Paris Call for Trust and Security in Cyberspace. The Call, developed through a multistakeholder process facilitated by the French government, promotes a rules-based cyberspace that respects human rights and fundamental freedoms by applying international law. The Call kicks-off a multi-year effort to realize its principles, and recommends a progress assessment one year after its publication.
Although a cybersecurity labeling system similar to Energy Star should prove valuable, we still have some questions to answer, chiefly: What would such a system look like? Who would run it? And how would someone earn the label?
As we have previously outlined in detail, sustainability management provides a useful conceptual framework for crafting forward-looking cybersecurity policy. A sustainable approach to cybersecurity involves, among other things, acknowledging that cybersecurity is a shared responsibility, framing business choices that prioritize security as investments, and engaging broadly in risk management practices. The Internet of Things (IoT) ecosystem has reached (or, arguably, passed) an inflection point in its development, and a sustainability-based security baseline for consumer-facing IoT is past due.
In a late-May vehicle safety review, Consumer Reports noticed a problem with the new Tesla Model 3’s brake performance: It stopped more like a truck than a sedan. Within days Elon Musk’s company was able to identify the issue and resolve it through an over-the-air (OTA) update.