The Charter-of-Trust (CoT) partners have agreed to deliver next-generation products with preset cybersecurity, following a clear “Security by Default” philosophy. At present, there are no uniform regulations governing this issue – many products leave the factory solely dependent on safety systems that do not provide comprehensive protection. Users often have to adjust security settings afterward. As a first step, the Charter partner companies have now defined which security features should be present and activated by default in next-generation products – ranging from strong authentication features to a unique product identity and the requirement that passwords must be changed upon first use. The CoT partners also believe that no undocumented functionalities or possibilities for remote connection should be part of initial device setup – another aspect that is not yet a general rule today. All these requirements are now being rolled out step by step within the relevant portfolios of the Charter of Trust member companies.