Company Sets New Standards for IoT Device Security

Xiaomi has published proposed guidelines to assure consumer IoT users that devices are processing their data securely. The “Cyber Security Baseline for Consumer Internet of Things Device Version 2.0” guidelines seek to protect security and user privacy from device hardware to device software to device communication. The company says the guide is a security baseline for all its smart devices and it wants them to be a springboard for global standards that promote universal protections against fundamental IoT data security risks as well as shielding privacy.

The guidelines themselves cover hardware, software and communications. Policies setting out the best way to tackle data security and privacy are complemented by protocols on authentication and access control, secure device booting and data deletion. All forthcoming Xiaomi devices are expected to meet the criteria.

Xiaomi said it aimed to expand its cybersecurity credentials after its WiFi 6-enabled mesh system received the BSI IoT Kitemark certification. Cui Baoqiu, Xiaomi vice president and chairman of the company’s security and privacy committee said the security and privacy of users is a top priority “and we promise that this applies to all markets where we operate,” he said. 

“Over the years, we have made great efforts to protect users’ security and privacy. I’m confident and proud to say that Xiaomi is in the leading position of IoT security policies and practices in the world, and we will continue to work hard to build a better IoT ecosystem for our users,” Baoqiu said.