Master the Basics to Manage IoT Security Risks

The very term Internet of Things (IoT) can sound like the buzziest of buzzwords. We all know we need to be aware of and plan for it, but sifting through all the security guidance about the IoT can be overwhelming.

Moving Beyond Buzzwords

To help cut through the noise, IBM released a new report, “Smart Things Call for Smart Risk Management,” detailing five key facts about the IoT to help security teams build IoT security into their risk management program. Users and manufacturers of connected devices and solutions can take action to reduce security risks by understanding these basic facts about the IoT.

Security technology is usually most efficient and effective when it is built in during the design and implementation phases. To ensure systems are functioning as expected, even when under attack, IoT systems can be tested with red team experts and monitored by specialized IoT platforms.

Read the complete report: Smart things call for smart risk management

The Increasing Value of IoT Security

According to Gartner, the number of connected things in use worldwide will exceed 20 billion by 2020. As the IoT becomes more ingrained into everyday business and our personal lives, we will be increasingly dependent on the data, insights and value it brings. However, it is important not to take these contributions to business and society for granted.

One particular area of potential complacency is security: As IoT adoption and value increases, it becomes even more important to secure the investments made and benefits accrued.

IoT risks and vulnerabilities vary widely, from annoying security issues to potentially apocalyptic exposures. Devil’s Ivy for example, exploited a flaw on connected cameras that enabled perpetrators to view video feeds and block access. More serious threats included unpatched vulnerabilities in radiation monitoring devices (RMDs) that could be used by attackers to endanger critical infrastructure.

The traditional approach of air-gapped security controls is also at risk as devices and solutions become more connected. Supervisory control and data acquisition (SCADA) and industrial control system (ICS) technologies are now under threat from a growing list of malicious actors. Furthermore, innovation in medical practices and the application of IoT in health care highlights the importance of protecting sensitive personal data.

Learn More

At this year’s Black Hat, IBM announced the launch of two new security testing practice areas focused on automotive security and the IoT. The announcement emphasized the importance of a multipronged approach to IoT security. Access to X-Force Red penetration testing alongside the trusted Watson IoT Platform is of paramount importance to solution developers and adopters.

To learn more about building IoT security into your risk management program, read the IBM report, “Smart Things Call for Smart Risk Management.”

James Murphy

Global Offering Manager, IBM Security

Diana Kelley

Executive Security Advisor, IBM Security

Operationalize cyber risk quantification for smart security

4 min read - Organizations constantly face new tactics from cyber criminals who aim to compromise their most valuable assets. Yet despite evolving techniques, many security leaders still rely on subjective terms, such as low, medium and high, to communicate and manage cyber risk. These vague terms do not convey the necessary detail or insight to produce actionable outcomes that accurately identify, measure, manage and communicate cyber risks. As a result, executives and board members remain uninformed and ill-prepared to manage organizational risk effectively.…

The evolution of ransomware: Lessons for the future

5 min read - Ransomware has been part of the cyber crime ecosystem since the late 1980s and remains a major threat in the cyber landscape today. Evolving ransomware attacks are becoming increasingly more sophisticated as threat actors leverage vulnerabilities, social engineering and insider threats. While the future of ransomware is full of unknown threats, we can look to the past and recent trends to predict the future. 2005 to 2020: A rapidly changing landscape While the first ransomware incident was observed in 1989,…

Defense in depth: Layering your security coverage

2 min read - The more valuable a possession, the more steps you take to protect it. A home, for example, is protected by the lock systems on doors and windows, but the valuable or sensitive items that a criminal might steal are stored with even more security — in a locked filing cabinet or a safe. This provides layers of protection for the things you really don’t want a thief to get their hands on. You tailor each item’s protection accordingly, depending on…

The evolution of 20 years of cybersecurity awareness

3 min read - Since 2004, the White House and Congress have designated October National Cybersecurity Awareness Month. This year marks the 20th anniversary of this effort to raise awareness about the importance of cybersecurity and online safety. How have cybersecurity and malware evolved over the last two decades? What types of threat management tools surfaced and when? The Cybersecurity Awareness Month themes over the years give us a clue. 2004 - 2009: Inaugural year and beyond This early period emphasized general cybersecurity hygiene,…

Security Intelligence

{{title}}

{{title}}

{{title}}

{{title}}

Topics

Moving Beyond Buzzwords

The Increasing Value of IoT Security

Learn More

More from Risk Management

Operationalize cyber risk quantification for smart security

The evolution of ransomware: Lessons for the future

Defense in depth: Layering your security coverage

The evolution of 20 years of cybersecurity awareness

Topic updates