UL withdraws from overseeing IoT labeling program

Cybersecurity Dive reports that UL LLC, which served as the lead administrator for the Federal Communications Commission's Cyber Trust Mark program, formally stepped down from the role in December, following an investigation into its China-related operations, bringing uncertainty to the future of the IoT labeling effort.

"Having now delivered many of the foundational elements of the Lead Administrator role and given other considerations, we respectfully submit our notice of withdrawal as Lead Administrator effective as of the date of this letter," said Chant Maurio, an executive at UL LLC. The initiative was launched during the Biden administration to improve baseline security in Internet of Things products and help buyers better understand security features.

Under the program, manufacturers would submit devices to accredited private laboratories for testing against required security standards, allowing compliant products to display a trust label. UL was selected by the FCC to coordinate the program and handle administrative work.

After President Donald Trump took office, the FCC began investigating the company's partnership with a Chinese firm and its labs operating in China. FCC Chairman Brendan Carr raised concerns about national security and said the agency would remain cautious. The FCC has not said whether it will continue the program or select a new lead administrator.