The IoT Security Controls Matrix is relevant for enterprise IoT systems that incorporate multiple types of connected devices, cloud services, and networking technologies. The Framework has utility across many IoT domains from systems processing only “low-value” data with limited impact potential, to highly sensitive systems that support critical services. The classification of a system is assigned by the system owner based on the value of the data being stored and processed and the potential impact of various types of physical security threats.
Changes for Version 3:
- Increased number of controls from 155 to 198
- New domain - Incident Management
- Improved technical clarity of controls and references
To learn how to use the matrix to evaluate and implement an IoT system for your organization, also check out the Guide to the IoT Security Controls Matrix v3.
Prefer to access this resource without an account? Download it now.





