Raws li Txoj Cai Khoom Siv Kev Nyab Xeeb thiab Kev Sib Txuas Lus Sib Txuas Lus 2023 (PSTI) tau tshaj tawm los ntawm UK thaum Lub Plaub Hlis 29, 2023, UK yuav pib tswj hwm kev ruaj ntseg network rau cov neeg siv khoom sib txuas txij lub Plaub Hlis 29, 2024, siv rau Askiv, Scotland, Wales, thiab Northern Ireland. Cov tuam txhab ua txhaum cai yuav raug nplua nyiaj txog li £ 10 lab lossis 4% ntawm lawv cov nyiaj tau los thoob ntiaj teb.
1.Introduction to the PSTI Act:
UK Consumer Connect Product Policy Policy yuav siv sij hawm thiab siv tau rau lub Plaub Hlis 29, 2024. Pib txij hnub no, txoj cai yuav xav kom cov tuam txhab tsim khoom lag luam uas tuaj yeem txuas nrog cov neeg siv khoom hauv tebchaws Askiv kom ua raws li qhov yuav tsum tau muaj kev nyab xeeb yam tsawg kawg nkaus. Cov kev ruaj ntseg yam tsawg kawg nkaus no yog raws li UK Consumer Internet of Things Security Practice Guidelines, lub ntiaj teb no ua tus neeg siv Internet ntawm Yam kev ruaj ntseg tus qauv ETSI EN 303 645, thiab cov lus pom zoo los ntawm UK lub cev tso cai rau cyber hem technology, National Cybersecurity Center. Cov txheej txheem no tseem yuav ua kom ntseeg tau tias lwm cov lag luam hauv cov khoom lag luam ntawm cov khoom lag luam no ua lub luag haujlwm tiv thaiv cov neeg siv khoom tsis zoo los ntawm kev muag khoom rau cov neeg siv khoom hauv tebchaws Askiv thiab cov lag luam.
Qhov system no suav nrog ob yam kev cai lij choj:
1) Tshooj 1 ntawm Cov Khoom Siv Kev Nyab Xeeb thiab Kev Sib Txuas Lus (PSTI) Txoj Cai ntawm 2022;
2) Cov Khoom Siv Kev Ruaj Ntseg thiab Kev Sib Txuas Lus (Kev Nyab Xeeb Kev Nyab Xeeb rau Cov Khoom Txuas Txuas) Txoj Cai ntawm 2023.
2. Txoj Cai PSTI suav nrog cov khoom lag luam:
1) PSTI tswj cov khoom lag luam:
Nws suav nrog, tab sis tsis txwv rau, cov khoom lag luam txuas nrog Is Taws Nem. Cov khoom lag luam muaj xws li: ntse TV, IP lub koob yees duab, router, ntse teeb pom kev zoo thiab khoom siv hauv tsev.
2) Cov khoom siv sab nraud ntawm PSTI tswj:
Xws li cov khoos phis tawj (a) desktop computers; (b) Laptop computer; (c) Cov ntsiav tshuaj uas tsis muaj peev xwm txuas rau cov xov tooj ntawm tes (tsim tshwj xeeb rau cov menyuam yaus hnub nyoog qis dua 14 xyoos raws li cov chaw tsim khoom siv, tsis yog qhov tshwj xeeb), cov khoom siv kho mob, cov khoom siv ntsuas ntsuas ntse, lub tsheb fais fab, thiab Bluetooth ib qho -on-ib qho khoom sib txuas. Thov nco ntsoov tias cov khoom no kuj tseem yuav muaj kev ruaj ntseg cybersecurity, tab sis lawv tsis raug them los ntawm PSTI Txoj Cai thiab yuav raug tswj hwm los ntawm lwm txoj cai.
3. Peb lub ntsiab lus tseem ceeb uas yuav tsum tau ua raws li Txoj Cai PSTI:
Daim nqi PSTI suav nrog ob qhov tseem ceeb: cov khoom yuav tsum muaj kev nyab xeeb thiab cov txheej txheem kev sib txuas lus hauv kev sib txuas lus. Rau kev nyab xeeb ntawm cov khoom, muaj peb lub ntsiab lus tseem ceeb uas xav tau kev saib xyuas tshwj xeeb:
1) Cov kev cai lo lus zais, raws li kev cai 5.1-1, 5.1-2. Txoj Cai PSTI txwv tsis pub siv cov passwords thoob ntiaj teb. Qhov no txhais tau hais tias cov khoom lag luam yuav tsum teeb tsa tus password tshwj xeeb lossis xav kom cov neeg siv teeb tsa tus password rau lawv thawj zaug siv.
2) Cov teeb meem kev tswj hwm kev nyab xeeb, raws li cov cai tswj hwm 5.2-1, cov tuam txhab tsim khoom yuav tsum tsim thiab nthuav tawm cov cai tshaj tawm txog qhov tsis zoo rau kev tshaj tawm kom ntseeg tau tias cov tib neeg uas pom qhov tsis zoo tuaj yeem ceeb toom rau cov tuam txhab thiab xyuas kom cov tuam txhab tuaj yeem ceeb toom cov neeg siv khoom tam sim ntawd thiab muab kev ntsuas kho.
3) Lub voj voog hloov tshiab kev nyab xeeb, raws li cov cai tswj hwm 5.3-13, cov tuam txhab yuav tsum tau qhia meej thiab nthuav tawm lub sijhawm luv tshaj plaws uas lawv yuav muab kev nyab xeeb hloov tshiab, kom cov neeg siv khoom nkag siab txog kev txhawb nqa kev nyab xeeb ntawm lawv cov khoom.
4. PSTI Act thiab ETSI EN 303 645 Cov Txheej Txheem Kev Xeem:
1) Kev npaj cov ntaub ntawv piv txwv: 3 cov qauv piv txwv suav nrog tus tswv tsev thiab cov khoom siv, cov software uas tsis tau sau npe, cov neeg siv phau ntawv / cov lus qhia tshwj xeeb / cov kev pabcuam cuam tshuam, thiab cov ntaub ntawv nkag mus rau tus account
2) Test ib puag ncig tsim: Tsim ib qho chaw sim raws li cov neeg siv phau ntawv
3) Kev soj ntsuam kev ruaj ntseg hauv lub network: kev tshuaj xyuas cov ntaub ntawv thiab kev kuaj xyuas, tshuaj xyuas cov lus nug tus neeg muag khoom, thiab muab cov lus qhia
4) Kev kho qhov tsis muaj zog: Muab kev pab tswv yim los kho qhov tsis muaj zog
5) Muab cov ntaub ntawv ntsuam xyuas PSTI lossis ETSI EN 303645 daim ntawv ntsuam xyuas
5. Cov ntaub ntawv ntawm PSTI Act:
1) UK Cov Khoom Ruaj Ntseg thiab Kev Sib Txuas Lus Infrastructure (Product Security) tswj hwm.
https://www.gov.uk/government/publications/the-uk-product-security-and-telecommunications-infrastructure-product-security-regime
2) Product Security and Telecommunications Infrastructure Act 2022
https://www.legislation.gov.uk/ukpga/2022/46/part/1/enacted
3) Cov Khoom Siv Kev Ruaj Ntseg thiab Kev Sib Txuas Lus (Kev Nyab Xeeb Kev Nyab Xeeb rau Cov Khoom Siv Txuas Txuas) Cov Cai 2023
https://www.legislation.gov.uk/uksi/2023/1007/contents/made
Txog tam sim no, nws tseem tsawg dua 2 lub hlis. Nws raug pom zoo tias cov tuam txhab loj xa tawm mus rau UK ua lag luam ua tiav PSTI daim ntawv pov thawj sai li sai tau kom ntseeg tau tias kev nkag mus rau hauv UK lag luam.
Post lub sij hawm: Mar-11-2024
