Intelligent CISO Issue 42 | Page 38

Continuous due diligence and commitment to enterprise-wide IoT visibility are essential to any organisation looking to harness the booming IoT market .
FEATURE
Without the security controls and discovery tools that are readily available for more traditional devices , IoT devices are largely left unmanaged and unsecured . These gaps mean vulnerable , easily exploited blindspots that can allow attackers access to internal and previously segregated networks . Before victim organisations know it , their devices are offline – a result that can at best mean a period of costly downtime and , at worst , in the case of healthcare professionals not having access to essential medical devices ; loss of life .
The wild , wild west of IoT
So , why are blindspots of this nature so common ? It ’ s largely due to the fact that the IoT market has accelerated faster than anticipated , with security being an afterthought that ’ s yet to catch up . While some steps have been taken to ensure certain security controls among IoT devices , the industry is still very much in its adolescence and regulators have yet to properly establish a means by which to monitor and encourage best practices when it comes to security . Until security measures catch up and strict best practices and regulations are implemented , properly securing these devices will prove difficult .
For years now , manufacturers and providers have been so focused on bringing their IoT devices and the insights they promise to their customers that they have foregone stringent security testing in the design phase . This is true for enterprise and civilian devices and has posed a particular threat to today ’ s workers who have been forced to access sensitive company data from their home networks , which are easily

Continuous due diligence and commitment to enterprise-wide IoT visibility are essential to any organisation looking to harness the booming IoT market .

38 www . intelligentciso . com