Thanks
@Michael Roza - it occurs to me that it would be good to liaise on the topic of IOT, as there is no difference between IIOT security requirements and the CSA ZT initiative. IOT uses the same paradigms - device, identity, network, application, data security. There is a slight architectural difference - in that sensors and other IOT devices may be connected to a site server before network transmission, otherwise it is exactly the same paradigm as for any cloud computing paradigm. I think it would be beneficial to focus on the similarities, because non technical people are all too often led astray by the appearance of the peripheral devices, e.g. IOT uses small compute capabilities, with networking variants such as RFID and LoRaWAN, and terminology such as shadow devices, which do not provide any real material difference to the security posture as defined by Zero Trust architecture.
------------------------------
Nya Murray
Director
Trac-Car
------------------------------
Original Message:
Sent: Sep 20, 2022 10:14:17 AM
From: Michael Roza
Subject: Workshop Summary Report for "Building on the NIST Foundations: Next Steps in IoT Cybersecurity" (NIST IR 8431)
Hi All,
NIST's Cybersecurity for the Internet of Things (IoT) program has releases:
• Workshop Summary Report for "Building on the NIST Foundations: Next Steps in IoT Cybersecurity" (NIST IR 8431). This IR reviews the keynote presentations from our June 2022 virtual workshop, and identifies NIST's key takeaways and next steps based on the workshop discussions and Q&A.
If you have questions about these documents, please send an email to [email protected].
------------------------------
Michael Roza CPA, CISA, CIA, MBA, Exec MBA
------------------------------