Although the benefits to Internet of things (IOT) are considerable, it also brings many security risks considering cars, pacemakers and critical infrastructure all form part of IOT.
So says Jayson O'Reilly, director of sales and innovation at ICT services and solutions provider DRS.
O'Reilly states the number of IOT devices is growing exponentially and each of these devices represents another possible target for cyber criminals, or another possible entry point for attackers to breach the enterprise.
According to O'Reilly, vendors developing IOT devices do not have much experience with security, and while they might include basic security features, they are not building proper security in from the ground up.
Because IP-enabled devices function differently, it makes sense to secure them at a network level rather than at an endpoint level, says O'Reilly.
Organisations must be able to identify legitimate and malicious patterns on IOT devices. It is critical for companies to have actionable threat intelligence to make mitigating decisions against any threats they may face, says DRS in a statement.
O'Reilly points out information security teams should begin preparations to transition from securing PCs, servers, mobile devices and traditional IT infrastructure, and start managing a much broader set of interconnected items including wearable devices, sensors and technology.
The security team should take the initiative to research security best practices to secure these emerging devices, and be prepared to move to a risk-based approach to security and mature policies as these devices make their way into client environments, he adds.
"Basic principles of confidentiality, integrity and availability need to be maintained in what will be an increasingly interconnected digital world.
"While the IOT has vast potential in terms of boosting workflow, business processes and general operations, there is little regulation pertaining to IOT and the data it generates. As always with security, err on the side of caution. Businesses, the industry, security vendors and governments need to work together to limit the threat that goes hand in hand with the IOT," concludes O'Reilly.
Share