If you are new to IoT please take a look at the following link for a basic info on IoT ….. Click here

What is IoT security?

IoT security is the protection of Internet of Things devices. While many of us have been taught as business owners that they need to protect computers, tablets and phones with antivirus software, the security risks related to IoT devices are less well known and their protection is often neglected.

Let’s look at it from a bigger picture

IoT carries potential to change the world for the better. Projections by Mckinsey for the impact of IoT on the Internet and the global economy are impressive, forecasting explosive growth of up to 43 Billion by 2023 in the number of IoT devices and their use in a wide variety of new and exciting applications. So this is where the importance of IoT security comes in.  Poorly secured IoT devices and services can serve as entry points for cyberattacks.

However, given the Internet global reach and impact, it is critical that its security be addressed.

What IoT security should you implement?

• A shared set of definitions and benchmarks around the security of Internet-connected devices.
• Shared guidelines implementation from a management level to ensure the security of Internet-connected devices over their lifespan, including the development, communications, and management processes are set forth from implementation to maintenance stages.
• Amend relevant policies, technical data and processes requirements for contractors and behavioral aspects (for instance generic passwords)
• Approach and collaborate with organizations focusing on IoT security and privacy in an attempt to reduce the amount risks.

Guideline principal’s checklist:

• No universal passwords for example password123
• Ensure that your contractor, IT department and head of IoT work hand-in-hand on secure encryption. Data should only ever be transmitted and stored securely using strong encryption.
• Data collection should be only what is necessary for a device to function and data dashboard analytics.
• Ensure devices are capable of receiving security updates.
• In the event that a device is removed, sold or scrapped the device should be reset and all data removed prior to being discarded.

How to ensure you cover the basics of IoT Security?

1. Before buying a product:

• Enquire and understand how the device collects and uses the data.
• Only purchase reputable products from confirmed manufacturers that adhere to international standards.
• No extra functionality – if you don’t need specific data to be collected, don’t use that specific function – lessens risks
• Consider the lifecycle and the support availability – spending a bit more and having a SLA in place for this will only cover your bases long run.

2. When in use:

• Always stick to the best practices set forth by the relevant IT team that supports your company.
• Ensure that the updates is stipulated in your SLA.
• It is truly only as strong as it’s weakest link in a chain, ensure that all devices are secured.

IoT Security, Internet of things and Building Automation Solutions, Making Buildings Work Smarter

Leave a comment if you would like for us to elaborate a bit more, or if you have a question!