US Consumer Product Safety Commission (CPSC) requirements, including connected product safety

Connected products must implement security measures to prevent network-based attacks that could cause physical harm.

Connected products must implement authentication mechanisms to prevent unauthorised control of safety-critical functions.

Safety-relevant data transmitted by connected products must be protected against tampering and interception.

Manufacturers should establish vulnerability disclosure programmes for security issues affecting product safety.

Manufacturers must monitor and report safety incidents related to connected product cyber vulnerabilities.

Procedures must be in place for issuing recalls when connected product vulnerabilities create imminent safety hazards.

Manufacturers must plan for safe product behaviour when connected features are discontinued or support ends.

Manufacturers must provide clear safety information to consumers about connected product risks and mitigations.

Manufacturers must analyse the likelihood and severity of injury for each expected function a connected product performs.

Manufacturers must conduct FMEA covering safety-critical functions including software and firmware components.

Risk analysis must cover every stage of the product lifecycle including software updates and end-of-life scenarios.

Manufacturers must identify components critical to safe operation including power supplies, sensors, software, and electronics.

Connected products should meet UL 2900-1 requirements for software cybersecurity of network-connectable devices.

Products with remote software update capability should comply with UL 5500 for safe update processes.

Manufacturers should participate in development of voluntary safety standards with UL, ASTM, and other bodies.

Safety implications of product interoperability with other connected devices must be evaluated and mitigated.

Connected product software must be developed following secure coding practices to prevent safety-related failures.

Every software update must be assessed for its impact on the safe operation of the connected product.

Remote software update mechanisms must ensure integrity and authenticity of updates per UL 5500 guidance.

Firmware must maintain integrity controls to prevent unauthorised modification that could create safety hazards.

Per US Consumer Product Safety Act Section 15(b): Substantial Product Hazard Reporting to CPSC within 24 hours of obtaining information including cybersecurity hazards.

Per CPSC + NIST IR 8425: Connected Product Cybersecurity Hazard Identification + risk assessment + alignment with NIST + secure default configuration.

Per CPSC: Voluntary Recall Notice + Corrective Action Plan + SaferProducts.gov Complaint Monitoring.