Security Enhancement of IoT with the Cybersecurity Act

The smart city initiatives are based on Internet of Things (IoT) solutions, massive data collection and processing, and a high level of automation. These technologies have inherent risks also. The European Union realized the issues arising from those technologies and based on the previous legislation of information security and ENISA, a new security ecosystem is being formed. The Cybersecurity Act (Regulation (EU) 2019/881) establishes the frames of cybersecurity certifications. Different certification schemes are now being developed, from secure products to industrial automation. The paper analyzes current regulations' applicability and possible schemes' further effects in securing IoT and smart city operations in Europe.