IoT is a very big category of technology that has been embedded into smartwatches, medical sensors, and smart appliances. Organizations are also enjoying the perks of IoT devices by streamlining their business operations. But the organizations should also be aware of all of the potential risk factors to ensure that IoT is being utilized for the benefit of the company and not to compromise the security. IoT devices mostly lack the built-in security aspects in them. As a result, this becomes a situation that generates threats and risks for the consumers and also the federal agencies.
As the demand for IoT devices is rising in the present era, it is quite important for all of the manufacturers to implement safety and security aspects to them all. According to the NIST, the built-in security potential of the IoT devices should possess the cybersecurity potential and offer a non-technical support system as well, which is relevant to that of cybersecurity. Both of these inclusions are sufficient to help mitigate and suppress the risks that are associated with IoT devices.
NIST (National Institute of Standards and Technology) Cybersecurity is destined to keep track of IoT programs. This institute offers guidance to all of the federal agencies and manufacturers of IoT devices on cybersecurity requirements of the IoT devices. The sole purpose of this initiative is to help the manufacturers and the government agencies understand the security potential of the device in a better manner.
NIST notes that non-technical security potential is directly in relation to the actions imposed by the manufacturers and the third parties that they impose in order to support the ongoing and initial security of all of the IoT devices.
The purpose of NIST Internal Report (IR) 8259B for the non-technical security support capabilities is to give a starting point to all of the organizations to realize these support capabilities. Along with that, it was for the organizations to seek adaptation of these capabilities in the future IoT devices that they intend to manufacture, acquire and integrate.
Integrating IoT devices into the organization’s information system can put up several challenges for the customers of that enterprise. Therefore, it is expected of the manufacturers to understand these challenges and then leverage upon the potential of secured controls to implement protective strategies. As per NIST, the manufacturers can consider following up on the non-technical support capabilities such as:
Information & Query Reception
Education & Awareness
These four items by NIST are not just the only alternatives for IoT device security. But there are many additional support solutions that are necessary to adapt for securing the use of such IoT devices within organizations. All of the organizations are also requested to define all of the additional support solutions that they use for their respective use cases. In this way, the risks can be identified while there is still time and can be prevented.
Credits: For more information, you can check here.
A post graduate and gold medalist in English literature with a great passion for writing. I am an avid blogger and love to write technical and nontechnical Articles, Blogs, e-books, the latest platform of global interest. I firmly believe in the healing power of writing and how it works fantastically to improve one’s creativity as well as personality. Life is too short to express yourself so, keep writing and enjoying.
by Neelam Dimri | Oct 18, 2021 | IoT News
by Neelam Dimri | Sep 20, 2021 | IoT News
by Neelam Dimri | Sep 16, 2021 | IoT News
by Neelam Dimri | Sep 13, 2021 | IoT News
by Neelam Dimri | Sep 07, 2021 | IoT News