Learn about IoT controls suggested as best practices by the Internet of Things Security Foundation (IoTSF).
- [Instructor] To finish developing…the IOT conceptual architecture, we'll need to select…the controls to manage the risks we've identified.…We then need to go down to the next layer…of the enterprise architecture,…and compose the controls into a set of security services.…These services then form the service-oriented…logical security architecture for our target IOT deployment.…We can select controls from…the traditional IT control libraries, such as ISO 27000,…the NES Cybersecurity framework, or SP 800-53.…
In doing this, we'd use the SABSA risk assessment…to drive the control requirement,…and the standard to identify an appropriate set of controls.…The IOT Security Foundation has established…a set of 33 principles for IOT security,…which are grouped around seven questions.…These principles are intended to act as a checklist…from which to then select controls,…and we can use them in conjunction…with our SABSA assessment as a double-check…that we've addressed all the threats.…
Let's look at the IOT Security Foundation's questions,…
- Designing an enterprise architecture
- Architecting security
- Designing IoT security
- Domain specific architectures
- Proximity network services
- IoT application services
- Revised conceptual architecture
Skill Level Intermediate
1. Enterprise Architecture
2. Designing IoT Security
3. Domain Specific Architectures
4. Proximity Network Services
5. Application Tier Services
6. Revised Conceptual Architecture
Bringing it all together4m 48s
What's next1m 16s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.