Las Vegas – Jan. 7, 2020 – UL, a leading global safety science company, today announced at CES that GE Appliances is the world’s first household appliance brand to test its connected products against UL’s IoT Security Rating assessment. 
The IoT Security Rating is a security verification and labeling solution for consumer Internet of Things (IoT) products. UL’s solution aims to help manufacturers and developers demonstrate the security due diligence of their products by leveraging proven security best practices and rating the security posture of IoT products. This helps to improve the transparency of security with consumers and to assist them in making conscious and informed purchasing decisions.
As part of an ongoing engagement, UL is testing and assessing all connected products on the GE Appliances IoT security platform, including dishwashers, washers, dryers, refrigerators, ovens, water heaters and water softeners to help demonstrate baseline security capabilities and protection of their consumer’s data at the appliance, on the GE Appliances mobile app and in the cloud.
The IoT Security Rating categorizes products according to an ascending five-level scale: Bronze, Silver, Gold, Platinum and Diamond. Verified products receive a differentiated UL Verified Mark security label – specifying the achieved security level – and are evaluated on an ongoing basis by UL. The unique UL Verified Mark code can be accessed on the UL Verify website. The achieved UL Verified Mark can serve as a competitive differentiator for manufacturer’s products and can be used on their products, packaging, marketing and retail environments. 
As part of UL’s IoT Security Rating, products are assessed according to their implementation of vital baseline security capabilities. Those security capabilities are aligned with global industry frameworks and best practices, such as the National Institute of Standards and Technology: Core Cybersecurity Feature Baseline for Securable IoT Devices; A Starting Point for IoT Device Manufacturers (draft NISTIR 8259), European Telecommunications Standards Institute: Cyber Security for Consumer Internet of Things (ETSI TS 103 645) and Council to Secure the Digital Economy: C2 Consensus on IoT Device Baseline Security (CSDE C2 Consensus).