The very term Internet of Things (IoT) can sound like the buzziest of buzzwords. We all know we need to be aware of and plan for it, but sifting through all the security guidance about the IoT can be overwhelming.

Moving Beyond Buzzwords

To help cut through the noise, IBM released a new report, “Smart Things Call for Smart Risk Management,” detailing five key facts about the IoT to help security teams build IoT security into their risk management program. Users and manufacturers of connected devices and solutions can take action to reduce security risks by understanding these basic facts about the IoT.

Security technology is usually most efficient and effective when it is built in during the design and implementation phases. To ensure systems are functioning as expected, even when under attack, IoT systems can be tested with red team experts and monitored by specialized IoT platforms.

Read the complete report: Smart things call for smart risk management

The Increasing Value of IoT Security

According to Gartner, the number of connected things in use worldwide will exceed 20 billion by 2020. As the IoT becomes more ingrained into everyday business and our personal lives, we will be increasingly dependent on the data, insights and value it brings. However, it is important not to take these contributions to business and society for granted.

One particular area of potential complacency is security: As IoT adoption and value increases, it becomes even more important to secure the investments made and benefits accrued.

IoT risks and vulnerabilities vary widely, from annoying security issues to potentially apocalyptic exposures. Devil’s Ivy for example, exploited a flaw on connected cameras that enabled perpetrators to view video feeds and block access. More serious threats included unpatched vulnerabilities in radiation monitoring devices (RMDs) that could be used by attackers to endanger critical infrastructure.

The traditional approach of air-gapped security controls is also at risk as devices and solutions become more connected. Supervisory control and data acquisition (SCADA) and industrial control system (ICS) technologies are now under threat from a growing list of malicious actors. Furthermore, innovation in medical practices and the application of IoT in health care highlights the importance of protecting sensitive personal data.

Learn More

At this year’s Black Hat, IBM announced the launch of two new security testing practice areas focused on automotive security and the IoT. The announcement emphasized the importance of a multipronged approach to IoT security. Access to X-Force Red penetration testing alongside the trusted Watson IoT Platform is of paramount importance to solution developers and adopters.

To learn more about building IoT security into your risk management program, read the IBM report, “Smart Things Call for Smart Risk Management.”

More from Risk Management

Water facilities warned to improve cybersecurity

3 min read - United States water facilities, which include 150,000 public water systems, have become an increasingly high-risk target for cyber criminals in recent years. This rising threat has demanded more attention and policies focused on improving cybersecurity.Water and wastewater systems are one of the 16 critical infrastructures in the U.S. The definition for inclusion in this category is that the industry must be so crucial to the United States that “the incapacity or destruction of such systems and assets would have a…

Working in the security clearance world: How security clearances impact jobs

2 min read - We recently published an article about the importance of security clearances for roles across various sectors, particularly those associated with national security and defense.But obtaining a clearance is only part of the journey. Maintaining and potentially expanding your clearance over time requires continued diligence and adherence to stringent guidelines.This brief explainer discusses the duration of security clearances, the recurring processes involved in maintaining them and possibilities for expansion, as well as the economic benefits of these credentialed positions.Duration of security…

Remote access risks on the rise with CVE-2024-1708 and CVE-2024-1709

4 min read - On February 19, ConnectWise reported two vulnerabilities in its ScreenConnect product, CVE-2024-1708 and 1709. The first is an authentication bypass vulnerability, and the second is a path traversal vulnerability. Both made it possible for attackers to bypass authentication processes and execute remote code.While ConnectWise initially reported that the vulnerabilities had proof-of-concept but hadn’t been spotted in the wild, reports from customers quickly made it clear that hackers were actively exploring both flaws. As a result, the company created patches for…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today