```

[Federal Register Volume 89, Number 249 (Monday, December 30, 2024)]
[Notices]
[Page 106480]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2024-31013]

=======================================================================
-----------------------------------------------------------------------

FEDERAL COMMUNICATIONS COMMISSION

[OMB 3060-1328; FR ID 270090]

Information Collection Being Reviewed by the Federal 
Communications Commission

AGENCY: Federal Communications Commission.

ACTION: Notice and request for comments.

-----------------------------------------------------------------------

SUMMARY: As part of its continuing effort to reduce paperwork burdens, 
and as required by the Paperwork Reduction Act (PRA) of 1995, the 
Federal Communications Commission (FCC or the Commission) invites the 
general public and other Federal agencies to take this opportunity to 
comment on the following information collection. Comments are requested 
concerning: whether the proposed collection of information is necessary 
for the proper performance of the functions of the Commission, 
including whether the information shall have practical utility; the 
accuracy of the Commission's burden estimate; ways to enhance the 
quality, utility, and clarity of the information collected; ways to 
minimize the burden of the collection of information on the 
respondents, including the use of automated collection techniques or 
other forms of information technology; and ways to further reduce the 
information collection burden on small business concerns with fewer 
than 25 employees.

DATES: Written PRA comments should be submitted on or before February 
28, 2025. If you anticipate that you will be submitting comments, but 
find it difficult to do so within the period of time allowed by this 
notice, you should advise the contact listed below as soon as possible.

ADDRESSES: Direct all PRA comments to Nicole Ongele, FCC, via email 
[email protected] and to [email protected].

FOR FURTHER INFORMATION CONTACT: For additional information about the 
information collection, contact Nicole Ongele, (202) 418-2991.

SUPPLEMENTARY INFORMATION: The FCC may not conduct or sponsor a 
collection of information unless it displays a currently valid control 
number. No person shall be subject to any penalty for failing to comply 
with a collection of information subject to the PRA that does not 
display a valid Office of Management and Budget (OMB) control number.
    OMB Control Number: 3060-1328.
    Title: Participation Information Collection for the IoT Labeling 
Program.
    Form Number: N/A.
    Type of Review: Revision of a currently approved collection.
    Respondents: Business or other for-profit; Not-for-profit 
institutions.
    Number of Respondents and Responses: 332 respondents; 3,150 
responses.
    Estimated Time per Response: 20 hours.
    Frequency of Response: One-time and on occasion reporting 
requirements; recordkeeping requirements.
    Obligation to Respond: Voluntary. Statutory authority for this 
collection is contained in 1, 2, 4(i), 4(n), 302, 303(r), 312, 333, and 
503, of the Communications Act of 1934, as amended, 47 U.S.C. 151, 152, 
154(i), 154(n), 302a, 303(r), 312, 333, 503; the IoT Cybersecurity 
Improvement Act of 2020, 15 U.S.C. 278g-3a to 278g-3e.
    Total Annual Burden: 43,100 hours.
    Total Annual Cost: No Cost.
    Needs and Uses: The Commission seeks to revise this collection to 
reflect changes to these rules adopted by the Commission in a Public 
Notice on September 10, 2024 (opening an application filing window and 
adopting for Cybersecurity Label Administrator (CLA) and Lead 
Administrator). The FCC's consumer IoT cybersecurity labeling program 
will provide consumers with easily understood, accessible information 
on the relative security of a consumer IoT product they are considering 
for purchase, which will increase the security of devices consumers 
bring into their homes and as part of a national IoT ecosystem. CLAs 
will be authorized by the Commission to certify use of the FCC IoT 
Label, which includes the U.S. government certification mark (U.S. 
Cyber Trust Mark), by manufacturers whose products are found to be in 
compliance with the Commission's IoT cybersecurity labeling program 
rules. The September 2024 Public Notice adopted rules for the CLAs and 
the Lead Administrator to reduce the risk of unauthorized access, use, 
disclosure, disruption, modification, or destruction of program data. 
Under this collection, each CLA will be required to create, update, and 
implement a cybersecurity risk management plan identifying the cyber 
risks that the entity faces, the controls used to mitigate those risks, 
and the steps taken to ensure that these controls are applied 
effectively to their operations. The plan must also describe how the 
CLA employs its organizational resources and processes to ensure the 
confidentiality, integrity, and availability of its information and 
information systems. The CLA's cybersecurity risk management plan must 
be available to the Commission upon request.

Federal Communications Commission.
Marlene Dortch,
Secretary. Office of the Secretary.
[FR Doc. 2024-31013 Filed 12-27-24; 8:45 am]
BILLING CODE 6712-01-P
```