Monday, October 21, 2024

Review - FCC Publishes Final Rule for Cybersecurity Labeling Administrator (CLA) Applications

Today, the Federal Communications Commission (FCC) published a final rule in the Federal Register (89 FR 84086-84096) announcing “a 15-business day filing window for applications from entities seeking designation as a Cybersecurity Labeling Administrator (CLA) and Lead Administrator and also adopt additional requirements for CLA and Lead Administrator applications as well as responsibilities that must be met by the selected Lead Administrator and CLAs.” This includes a 30-day ICR notice for the associated information collection requirements of this final rule.

Applications

Today’s final rule is a summary of the Commission's document in PS Docket No. 23-239. That document, dated September 10th, 2024, announced the 15-day window for applications for LA and CLA’s. That window closed on October 1st, 2024.

Burden Estimate

Appendix D of PS Docket 23-289 provides the burden estimate for the LA and CLA application process, OMB control number 3060-1328. It reports that the FCC expects that each LA application will take 10 hours and each CLA application will take 20 hours. There is no estimate provided for the number of applications that the Commission expects to receive, so a full burden estimate is not provided.

The FCC is soliciting comments on the new information collection request supporting these applications. Comments may be mailed to the FCC at PRA@fcc.gov. Comments should be submitted by November 20th, 204.

 

For more information on this rulemaking, including a background look at the roles of LA and CLAs in the FCC IoT Label Program, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/fcc-publishes-final-rule-for-cybersecurity - subscription required.

No comments:

 
/* Use this with templates/template-twocol.html */