Cybersecurity Policy Report, Two Cyber Trust Mark Administrators Win Conditional FCC Approval, (Aug 12, 2026)

By Lynn Stanton

IIA Lab Services LLC and Element Materials Technology Portland – Evergreen, Inc., have received conditional approval to be cybersecurity label administrators (CLAs) for the FCC’s U.S. Cyber Trust Mark (USCTM) voluntary cybersecurity labeling program for consumer wireless Internet of things (IoT) products, the Public Safety and Homeland Security Bureau announced.

The bureau also announced the opening of a new filing window for other entities seeking to be recognized as CLAs. The filing window, which opened today, will remain open until closed by the bureau. Applicants should follow the instructions in the 2024 initial filing window public notice.

“CLAs will be responsible for certifying use of the FCC IoT label and USCTM and day-to-day management of the program. The Commission retains ultimate control and oversight over the program as the USCTM Program owner. CLAs are responsible for sharing the Lead Administrator’s costs in performing its Lead Administrator duties on behalf of the program. CLAs will review for reasonableness the Lead Administrator’s estimated forward-looking costs which have been submitted to the Bureau and the Office of Managing Director (OMD), which will include program stand-up costs and ongoing program costs to perform the Lead Administrator’s duties for the upcoming calendar year. If these estimated costs are determined by the Bureau and OMD to be reasonable, they will be used to estimate the overall CLA cost sharing obligation,” the bureau said in a public notice in PS docket 23-239.

Approval is conditional upon execution of a trademark use agreement with the FCC and, “to address national security concerns, the authority of CLAs to grant applications to use the FCC IoT Label under the USCTM Program, will automatically terminate if the CLA subsequently becomes owned or controlled by or affiliated with an entity that produces equipment found on the Covered List, or otherwise added to any exclusionary list identified in the IoT Labeling Order as precluding authorization as a CLA,” the bureau said.

News: FederalLegislation DataSecurity