Elevating Mobile Security Standards: The Impact of Extended Support Periods

Consumers Demand Secure Devices and Longer Support

A recent survey conducted by Omdia, a research and consulting firm, reveals that consumers worldwide are increasingly concerned about the security of their devices and the need for longer support. The survey, which included 1,578 participants from 13 major countries in the Americas, Asia & Oceania, and Europe, highlights the growing importance of security updates in an era where mobile phones are used for sensitive activities such as online banking and identity verification.

The Importance of Security Updates

While device manufacturers strive to create products that are secure from the start, vulnerabilities are constantly evolving. Security updates play a crucial role in identifying and remedying these vulnerabilities in a timely manner. This is particularly important as consumers rely more heavily on mobile devices for sensitive tasks, which underscores the critical need for ongoing support and frequent security-specific updates.

The Support Consumers Need

Debates surrounding the appropriate length of support and replacement cycles for mobile devices have garnered attention from those advocating for sustainable tech. However, the survey results make it clear that longer support is beneficial for both security and sustainability. The study found that many phones under $500 receive support for only two years, while a majority of consumers reported using their previous phone for a longer period. Furthermore, a small percentage of respondents kept their previous phone beyond the support offered by any phone on the market at the time. This has implications for the growing second-hand phone market, as outdated devices may lack necessary security updates, leaving users vulnerable.

Currently, only a few devices offer more than five years of guaranteed security updates, including the Google Pixel 8 and Pixel 8 Pro (seven years) and the Fairphone 5 (eight years). Prolonging support for devices can slow down the rate of replacements and reduce environmental impact in the smartphone industry by decreasing production.

Identifying Responsibility

When it comes to ensuring device security, consumers place the responsibility primarily on the operating system developer, such as Apple or Google. However, the duration of support is primarily determined by the device maker and their negotiations with chipset manufacturers. Companies like Apple and Google, who have control over the entire ecosystem of their devices, are in a unique position to commit to longer support periods. However, for Android brands like Samsung, the process is more complex.

Regulatory pressure is expected to impose mandatory security requirements on device manufacturers, importers, and distributors to enhance transparency in device updates. Governments, policymakers, and standards bodies are stepping in to develop baseline requirements, product labels, and minimum security standards. The UK’s Product Security and Telecommunications Infrastructure (PSTI) Act, for example, requires device manufacturers to state the support period at the point of sale starting from April 2024. Similar guidance and legislation are being proposed in other countries including the US, EU, China, Japan, and Korea.

The EU Cyber Resilience Act is set to include operating systems for mobile devices, mandating security updates for a minimum of five years. Manufacturers of connected devices should prioritize standards and guidance, such as ETSI EN 303 645 (Cybersecurity for Consumer IoT), to prepare for upcoming regulations. Additionally, device makers can offer consumer choice and transparency by participating in labeling and certification schemes, even though they may currently be voluntary.

Editorial: Balancing Security and Sustainability

The findings of Omdia’s survey highlight the increasing consumer demand for both secure devices and longer support periods. This demand reflects the growing awareness of the potential risks associated with using mobile devices for sensitive activities and the need to keep pace with evolving threats.

While it is crucial for device manufacturers to prioritize security updates and provide extended support, striking a balance between security and sustainability is also important. Extending support periods can help reduce waste and environmental impact by prolonging the lifespan of devices and limiting the need for frequent replacements.

However, manufacturers must also consider the practicality of providing support for an extended period. As technology advances rapidly, maintaining compatibility and ensuring timely delivery of updates can present significant challenges. Manufacturers should explore innovative solutions, such as modular designs, that allow for easier and more efficient updates, while also considering the potential impacts on device performance and user experience.

Furthermore, collaboration between governments, industry stakeholders, and standards bodies is essential to establish clear and enforceable regulations for device security and update support. These regulations should focus on transparency, consumer awareness, and minimum standards to protect users and maintain trust in the ever-expanding digital ecosystem.

Advice: Prioritizing Security and Making Informed Choices

As consumers, it is essential to prioritize security when selecting a new smartphone. Consider the following recommendations:

1. Assess Security Features:

Prioritize devices that offer robust security features, such as encrypted storage, biometric authentication, and regular security updates. These features can significantly enhance the security of your device and protect your data.

2. Research Update Support:

Familiarize yourself with the update support period of the device you intend to purchase. Check whether the manufacturer commits to providing regular security updates for an extended period. Look for devices that offer support beyond the industry standard of two years.

3. Consider Refurbished Devices:

If longer support is a priority for you, consider purchasing a refurbished device. These devices often come with shorter support periods than brand-new devices, but the price may be more affordable, and it can help reduce electronic waste by extending the lifespan of devices.

4. Stay Informed About Regulations:

Stay updated on the latest regulations and initiatives surrounding device security and update support. Familiarize yourself with the requirements proposed by governments and standards bodies in your region. This knowledge will empower you to make informed choices and advocate for your rights as a consumer.

5. Encourage Industry Accountability:

Support companies that prioritize security and sustainability by choosing devices from manufacturers that offer longer support periods. By making conscious purchasing decisions, consumers can encourage the industry to prioritize security and environmental sustainability.

Ultimately, striking a balance between security, sustainability, and technological advancement is crucial. By demanding secure devices and longer support, consumers can contribute to a safer and more sustainable digital future.