I wrote a post yesterday on PSTI – aka the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations and the implications of it for industry involved in the supply chain of such products.
I thought it would be worth just considering what this means for the industry and muse over how it might be enforced by my ex-colleagues at OPSS from the end of April.
As a starter for 10, the Department for Science, Innovation and Technology is the policy owner. See them as the conductor unifying the orchestra, setting the tempo and controlling the pace of the music with OPSS then shaping and implementing what is then the sounds to the audience.
During my time at OPSS, I was Head of Enforcement and have a fair bit of experience navigating my way around these sorts of arrangements where OPSS are asked by different government departments to provide the enforcement arm of new regulations so this scenario is nothing new. In fact, I would even go as far to say this is a firm positive from my perspective that OPSS are in the mix here.
OPSS has recently updated its enforcement policy which basically lays down the decision making process and covers how and why decisions are made. OPSS mention the primary focus being with about protecting people and the environment coupled with ensuring adequate steps are taken to address non compliance. Its that word adequate that’s interesting…
From experience, I would wager that OPSS will be taking a pragmatic approach to enforcement from the end of April but that doesn’t mean that business should kick back and put its feet up. Quite the contrary…
Advice from the team at DSL Consulting is for all businesses caught in this space to be looking at the new requirements and obligations very seriously and making the necessary preparations to comply to its best capabilities.
If you and your business need support with PSTI, do reach out…
