Since August 14, 2024, the Federal Office for Information Security (BSI) in Germany has begun issuing security labels for IT devices. These labels provide a snapshot of the security level that users can expect from their devices.
In today’s digital age, smartphones and tablets used in corporate settings handle and store vast amounts of sensitive information, making them prime targets for hackers. To protect personal information such as photos, videos, documents, messages, and contacts, users require a certain level of security.
The BSI has introduced guidelines for manufacturers to qualify for these IT security labels. To earn a label, manufacturers must ensure their products, components, and services adhere to specific security standards.
Key requirements include:
a.) Identifying and addressing vulnerabilities promptly.
b.) Maintaining transparency about data collection, analysis, and storage practices.
c.) Informing users about the use of components like microphones, cameras, and location sensors.
d.) Clearly outlining permissions required by pre-installed mobile apps for accessing information such as camera, contacts, microphone, location, messages, and gallery.
Privacy advocates emphasize that these guidelines should not only be established in theory but should be rigorously applied by manufacturers.
The need for such IT security labels extends beyond Germany, as digitalization becomes increasingly pervasive worldwide. These labels provide valuable insights into the cybersecurity measures of devices, helping both consumers and businesses make informed decisions and fostering trust in the products they use. Thus, these labels not only enhance business reputations but also ensure that consumers can use products with greater confidence.
