Cloud 101CircleEventsBlog
Register for CSA’s free Virtual Cloud Trust Summit to tackle enterprise challenges in cloud assurance.

Download Publication

Future Proofing the Connected World
Future Proofing the Connected World

Future Proofing the Connected World

Release Date: 10/07/2016

Working Group: Internet of Things

The Internet of Things (IoT) is transforming consumer, business, and industrial practices by creating a world that is perpetually connected to the internet. Thus, IoT has become a significant domain of cloud security. Organizations that manufacture IoT products should endeavor to protect themselves and their customers from all threats that could arise in the future since, we’ve come to find, an IoT system is only as secure as its weakest link.

This document by the IoT Working Group provides actionable and useful guidance for securing the individual products that make up an IoT system. In it, you will find a comprehensive guide to securing IoT devices, including 13 steps to integrate into your development process, and an outline of the top IoT security considerations.

Key Takeaways:
  • What the main security issues and challenges are for IoT
  • Why you should care about IoT security
  • How to provide a business case for IoT security
  • Which security options you should use for IoT development platforms
  • How to enact secure device design and development processes, including a detailed checklist for security engineers to follow
  • Which threats impact specific IoT products
Who It’s For: This document is for any manufacturer of IoT products. Organizations that have begun transforming their existing products into IoT-enabled devices will find it particularly useful. In addition, IoT startups can use this document as a starting point for creating their security strategy.
Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
View translations
Related resources
The Six Pillars of DevSecOps: Measure, Monitor, Report, and Action
The Six Pillars of DevSecOps: Measure, Monitor,...
Cloud Controls Matrix and CAIQ v4
Cloud Controls Matrix and CAIQ v4
HSM-as-a-Service Use Cases, Considerations, and Best Practices
HSM-as-a-Service Use Cases, Considerations, and...
Exploring Syscall Evasion – Linux Shell Built-ins
Exploring Syscall Evasion – Linux Shell Built-ins
Published: 05/20/2024
Apple's New iMessage, Signal, and Post-Quantum Cryptography
Apple's New iMessage, Signal, and Post-Quantum Cryptography
Published: 05/17/2024
Navigating Cloud Security Best Practices: A Strategic Guide
Navigating Cloud Security Best Practices: A Strategic Guide
Published: 05/15/2024
How to Design an IT Service Model for End User Happiness
How to Design an IT Service Model for End User Happiness
Published: 05/15/2024

Acknowledgements

John Yeoh
John Yeoh
Global Vice President of Research, CSA

John Yeoh

Global Vice President of Research, CSA

With over 15 years of experience in research and technology, John excels at executive-level leadership, relationship management, and strategy development. He is a published author, technologist, and researcher with areas of expertise in cybersecurity, cloud computing, information security, and next generation technology (IoT, Big Data, SecaaS, Quantum). John specializes in risk management, third party assessment, GRC, data protection, incid...

Read more

Luciano (J.R.) Santos
Luciano (J.R.) Santos
Chief Customer Officer, CSA

Luciano (J.R.) Santos

Chief Customer Officer, CSA

J.R. Santos serves as the Chief Customer Officer for the Cloud Security Alliance. In this role, J.R. serves as a CSA Member advocate, partnering with leaders across all business units to transform the member experience and ensure that members are the center of every business decision. J.R. leads the Experience Services organization that includes the CSA Membership and Sales team, who work collaboratively to promote a consistent experience f...

Read more

Brian Russell
Brian Russell

Brian Russell

Brian Russell is co-author of the book “Practical Internet of Things Security” and is a Chief Engineer focused on Cyber Security Solutions for Leidos (www.leidos.com). He oversees the design and development of security solutions and the implementation of privacy and trust controls for customers. Brian leads efforts that include security engineering for Unmanned Aerial Systems (UAS) and Connected Cars, and the development of hig...

Read more

​Aaron Guzman
​Aaron Guzman

​Aaron Guzman

Aaron is a passionate information security professional specializing in IoT, embedded, and automotive security. He is co-author of the “IoT Penetration Testing Cookbook” and a technical editor for the "Practical Internet of Things Security” Packt Publishing books. Aaron is co-chair of CSA’s IoT working group as well as a leader for OWASP’s IoT and Embedded Application Security projects; providing practical guidance to address the most commo...

Read more

Sabri Khemissa
Sabri Khemissa

Sabri Khemissa

Sabri is the ICS group cybersecurity officer a French multinational corporation that produce a variety of construction and high-performance materials. He is in charge of developing and maintaining the cybersecurity strategy, building and coordinate a cross-country and cross-business cybersecurity governance, supporting business initiatives, including strategic Smart Manufacturing and IIoT projects with a large shift to cloud services, defin...

Read more

Srinivas Tatipamula
Srinivas Tatipamula
Principal Security Advisor, Fairfax

Srinivas Tatipamula

Principal Security Advisor, Fairfax

C-CISO|CISSP|CISA|AWS CSS|AWS CSA|CDPSE|CISM|CGEIT|CRISC|ISO 27000LA|CCSK|ITIL-F|PMP|Bachelor of Economics (Hons)|Bachelor of Law| MS in Digital Forensics

Overall 30 plus years in IT and over 18 years in Cyber Security

Publications:

1. Cloud Security Alliance Internet of Things (IoT) Working Group IoT Security Controls Guide Version Published March 2019

2. CSA IoT Controls Matrix March 2019

3. ...

Read more

Paul Lanois Headshot Missing
Paul Lanois

Paul Lanois

Lakmal Rupasinghe Headshot Missing
Lakmal Rupasinghe

Lakmal Rupasinghe

Mark Szewczul Headshot Missing
Mark Szewczul

Mark Szewczul

K S Abhiraj Headshot Missing
K S Abhiraj

K S Abhiraj

AK Sharma Headshot Missing
AK Sharma

AK Sharma

Drew Van Duren Headshot Missing
Drew Van Duren

Drew Van Duren

Thomas Donahoe Headshot Missing
Thomas Donahoe

Thomas Donahoe

Heath Hendrickson Headshot Missing
Heath Hendrickson

Heath Hendrickson

Srinivas Naik Headshot Missing
Srinivas Naik

Srinivas Naik

Luciano Ferrari Headshot Missing
Luciano Ferrari

Luciano Ferrari

Giuliana Carullo Headshot Missing
Giuliana Carullo

Giuliana Carullo

Loic Falletta Headshot Missing
Loic Falletta

Loic Falletta

Masaaki Futag Headshot Missing
Masaaki Futag

Masaaki Futag

Raghavender Duddilla Headshot Missing
Raghavender Duddilla

Raghavender Duddilla

Sudharma Thikkavarapu Headshot Missing
Sudharma Thikkavarapu

Sudharma Thikkavarapu

Ravi Dhungel Headshot Missing
Ravi Dhungel

Ravi Dhungel

Shyam Sundaram Headshot Missing
Shyam Sundaram

Shyam Sundaram

Ayoub Figuigui Headshot Missing
Ayoub Figuigui

Ayoub Figuigui

Kim White Headshot Missing
Kim White

Kim White

Priya Kuber Headshot Missing
Priya Kuber

Priya Kuber

Sateesh Bolloju Headshot Missing
Sateesh Bolloju

Sateesh Bolloju

Jinesh M.K. Headshot Missing
Jinesh M.K.

Jinesh M.K.

Sewmi Rajapaksha Headshot Missing
Sewmi Rajapaksha

Sewmi Rajapaksha

Steve Brukbacher Headshot Missing
Steve Brukbacher

Steve Brukbacher

Mark Grimes Headshot Missing
Mark Grimes

Mark Grimes

Chalani Perera Headshot Missing
Chalani Perera

Chalani Perera

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training