International. UL launched safeCyberTM Digital Security Platform, a suite of solutions aimed at democratizing IoT security and empowering key organizations, such as device manufacturers, vendors, and system integrators, to take charge of their connected ecosystems.
From smart home devices and sophisticated medical devices, to advanced automotive technology and Industry 4.0, UL's SafeCyberTM digital security platform aims to mitigate the growing volume of cybersecurity threats facing these organizations.
According to a report by Statista, estimates suggest that the roughly 8.74 billion connected devices in use in 2020 will rise to more than 25.4 billion by 2030, and amid that uptick in connectivity, organizations are facing a number of new cybersecurity threats, a recent study revealed supply chain attacks increased 42% in the first quarter of 2021 across 27 vendors. External. Coupled with a complex and fast-moving global regulatory landscape, now more than ever organizations need a comprehensive yet optimized solution to assess their overall cybersecurity posture and risk.
"The proliferation of connected devices has unlocked immense new economic potential, but it has also introduced a wave of cybersecurity risks that can materially impact businesses," said Jukka Makinen, managing director of UL's Identity management and security division. "SafeCyberTM helps organizations understand and assess risk holistically, allowing both new and existing assets to be designed and maintained to comply with the latest cybersecurity laws and best practices."
As part of the launch, UL formally unveiled its Maturity Path capability, a solution that provides device manufacturers, vendors and system integrators with a maturity assessment for connected device security to build sustainable product safety governance and processes.
UL also announced that it offers firmware verification and field monitoring capabilities within the SafeCyberTM platform. Firmware Check will provide stakeholders with a security check of firmware implementations that are currently under development, while field monitoring will allow those organizations to perform security checks on firmware that is already in the field at scale. These capabilities will provide detailed reports on issues that could affect firmware security, such as:
- Software composition analysis and software bill of materials
- Known/common vulnerabilities and exposures
- Unknown vulnerabilities (zero-day vulnerabilities)
- Compliance analysis of supported standards and guidelines, including UL IoT Security Rating Program, ETSI 303 645, ISO 21434 and IEC 62443 4-2, among others
Together, these capabilities will enable UL customers to manage cybersecurity governance and processes for all product lines in one integrated solution. In addition, the platform will help accelerate firmware development response times while addressing vulnerabilities to help ensure security and compliance readiness from the start.
"For more than 125 years, UL has been a trusted partner helping organizations ensure the security and compliance of their products and solutions," Makinen added. "Today's launch of SafeCyberTM marks an important milestone in our long-term vision to develop best-in-class capability that helps organizations move beyond a compliance mindset and toward a proactive posture that allows them to actively manage their security posture in what is becoming an increasingly connected and ever-evolving threat landscape."
