The circle of cybersecurity distrust around Chinese- and Russian-based tech companies is widening again.
Vermont's Chief Information Officer issued a pair of directives to state agencies this week telling them to assess their use of vendors, report back to state CISO Nicholas Andersen within 30 days, and then replace specific Russian and Chinese vendors and products.
Tech companies Vermont is banning
The following companies are on Vermont's cybersecurity naughty list:
• Kaspersky Lab
• Huawei
• ZTE
• Hytera Communications
• Hangzhou Hikvision Digital Technology
• Dahua Technology
"This includes equipment used to support any information technology, telecommunications, industrial control system, supervisory control, and data acquisition system, systems used for the purpose of public safety, security of government facilities, physical security surveillance of critical infrastructure, and other security purposes, building infrastructure support or video surveillance purpose."
Within 90 days, the directive requires Vermont agencies to implement a plan to replace uses of Kaspersky Lab, Huawei, ZTE, Hytera, Hangzou Hikvision, and Dahua Technology.
[RELATED: 8 Steps Huawei Took to Steal IP from T-Mobile]
The directive cites U.S. Intelligence assessments of Kaspersky Lab being required by Russian law to help Russian Intelligence if asked to. And also "about the potential for Chinese intelligence and security services to use Chinese information technology firms as routine and systemic espionage platforms...."
Read Vermont's Cybersecurity Directives for yourself, which were obtained by the Burlington Free Press.
Is your organization using these vendors, and if so, do you trust them or are you intending to replace them?
Either way, we imagine we'll hear discussion about this in the halls and in sessions at SecureWorld Boston on March 27-28.
[RELATED: Kaspersky's Tweets After NSA Hacking Allegations and Huawei Spying Charges]
