IoT Security In The Enterprise: 8 Steps

Follow these best practices to avoid security pitfalls with your Internet of Things deployment.

One of the top issues regarding the viability of the Internet of Things in the enterprise is how IoT data and devices will be secured. Indeed, IoT introduces several new architecture dynamics that traditional IT security administrators may not be accustomed to on such a large scale. And if security is not properly addressed in the early development stages of an IoT project, you run the risk of data loss and the possibility of introducing weak points on your network that can be used by hackers to infiltrate your entire infrastructure.

The good news is that there are some relatively simple steps for securing the Internet of Things that can largely reduce the risk level of data loss and data breaches in your organization. These best practices can be easily forgotten or ignored. Physical security of IoT devices that are deployed in public areas may not seem like a big deal, but can come back to haunt you later on if overlooked.

Following the steps described in this slideshow can help you avoid problems due to the lack of inherent security of IoT devices. Studies have shown that IoT device vendors are not taking security all that seriously. For example, a 2014 HP study found that 70% of IoT devices deployed are vulnerable to some type of attack. Our best practice measures will help you better protect and isolate IoT devices and reduce your attack surface in the event that your IoT deployment becomes compromised.

Enterprise organizations should in no way curb their IoT aspirations out of fear that it will become a headache in terms of device and data security. In reality, all it takes is some common sense security practices that can be easily implemented on day one, and maintained with little effort throughout the lifecycle of the system.

(Image: Modified Weedezign/iStockphoto)

About the Author(s)

Andrew Froehlich, President, West Gate Networks

President, West Gate Networks

As a highly experienced network architect and trusted IT consultant with worldwide contacts, particularly in the United States and Southeast Asia, Andrew Froehlich has nearly two decades of experience and possesses multiple industry certifications in the field of enterprise networking. Froehlich has participated in the design and maintenance of networks for State Farm Insurance, United Airlines, Chicago-area schools and the University of Chicago Medical Center. He is the founder and president of Loveland, Colo.-based West Gate Networks, which specializes in enterprise network architectures and data center build outs. The author of two Cisco certification study guides published by Sybex, he is a regular contributor to multiple enterprise IT related websites and trade journals with insights into rapidly changing developments in the IT industry.

SUBSCRIBE TO OUR NEWSLETTER
Stay informed! Sign up to get expert advice and insight delivered direct to your inbox
More Insights