SDxCentral
Join Login
SD-WAN 4 5G 5 MEC IoT 4 SDN 3 NFV 5 Containers 5 Cloud 9 Security 8 AI 2 Converged DC 3 SD-Storage 2 NPM/APM 1

Login to SDxCentral

Your login link has been emailed to you.

Or login with your password

Enter Your Password

Forgot your password? Login as a different user?
  • Directory
  • Reports
  • Webinars
  • eBooks
  • eBriefs
  • White Papers
  • Sponsored Content
  • Videos
  • Resources
  • Use Cases
  • Participate

Join SDxCentral and get information tailored to your particular interests everyday.

Join
Sponsored:
Citrix 3 Dell EMC 2 Linux Foundation 11 Lumina OCP OpenStack 11 Riverbed 1 Verizon 1 VMware

Industrial IoT Group Releases Security Maturity Model

Industrial IoT Group Releases Security Maturity Model
Jessica Lyons Hardcastle
Jessica Lyons HardcastleApril 9, 2018
10:33 am PT

The Industrial Internet Consortium (IIC) today published a white paper to help companies meet industrial Internet of Things (IoT) security goals and prioritize spending on security tools and mechanisms.

The industrial IoT group, founded by AT&T, Cisco, GE, IBM, and Intel, in September 2016 released a common framework for security. At the time, the IIC said the next step would be to put the security framework into practice.

Related Articles

Ericsson-70-of-Service-Providers-Will-Focus-on-Cellular-IoT
Ericsson: 70% of Service Providers Will Focus on Cellular IoT
Juniper Unveils Contrail Software to Compete with Cisco, VMware
Juniper Unveils Contrail Software to Compete With Cisco, VMware
Nokia Puts Box Around Edge Cloud Support for 5G
Nokia Puts a Physical Box at the Edge to Support Cloud, 5G
AT&T Says the 5G Secret Sauce Is in the Software
AT&T Says the 5G Secret Sauce Is in the Software
Verizon Citrix Hitachi Investors in The Fabric’s Latest $20M Funding Pool
Verizon, Citrix, and Hitachi Invest in The Fabric’s Latest $20M Funding Pool

Today’s release is part one of that next step, said Sandy Carielli, white paper co-author and director of security technologies at Entrust Datacard. The new publication, titled “IIC IoT Security Maturity Model: Description and Intended Use,” introduces the IIC’s security maturity model, which defines levels of security maturity for a company to achieve based on its goals.

Part two, the “The IIC Security Maturity Model: Practitioners Guide,” will be released in the coming months and will include technical guidance for assessing security maturity levels.

Not all IoT systems require the same security tools and procedures. “What you need to do for smart lightbulbs is pretty different from manufacturing floors,” Carielli said.

This framework allows individual industries and companies to determine their own security priorities, and these mechanisms and processes are deemed “mature” if they are expected to be effective in addressing those security goals.

This also helps companies focus their spending, Carielli said. “The security maturity model allows organizations to prioritize their security investments and have an ongoing roadmap — it doesn’t have to be ‘oh my god we have to do everything at once,’” she explained.

Organizations apply the model by following a process. First, business stakeholders define security goals and objectives, which are tied to risks. Technical teams within the organization, or third-party assessment vendors, then map these objectives into tangible security techniques and capabilities and identify an appropriate security maturity level. After this, organizations develop a security maturity target.

It’s an ongoing process, and companies should repeatedly compare the target to their current state to identify further improvements they can make, Carielli added. “We felt it was important for organization to create a target they can consistently measure against and see where the gaps are between their desired target and actual state.”

The new white paper comes as major companies ramp up their IoT investments. Last week Microsoft pledged to spend $5 billion on IoT research and development over the next four years. In February Google said it reached a $50 million deal to buy IoT platform company Xively from LogMeIn. And Dell Technologies in October said it will create a new IoT division and funnel $1 billion over three years for IoT research and development.

Share:

Article Categories:

News

Jessica Lyons Hardcastle

About Jessica Lyons Hardcastle

Jessica is a Senior Editor, covering next-generation data centers, security, and software-defined storage at SDxCentral. She has worked as an editor and reporter for more than 15 years at a number of B2B publications including Environmental Leader, Energy Manager Today, Solar Novus Today and Silicon Valley Business Journal. Jessica is based in the Silicon Valley.

Have a story? Have a News Tip?

Send it to SDxCentral editors as editors@sdxcentral.com.

Leave a Reply Cancel reply

You must be logged in to post a comment.

Join SDxCentral™ to receive exclusive access.

Sign Up Now!

New Report: 2018 Future of the Converged Data Center

2018 Future of the Converged Data Center is available for free download. In this FREE Report, find out why CI and HCI are the hot new platforms in 2018, and understand their relevance to enterprise, cloud and service provider data centers.

About SDxCentral

  • About Us
  • Editorial Team
  • Editorial Calendar
  • Work With Us
  • Careers at SDxCentral
  • Support
  • Legal
  • Contact Us

Engage With us

This material may not be copied, reproduced, or modified in whole or in part for any purpose except with express written permission from an authorized representative of SDxCentral, LLC. In addition to such written permission to copy, reproduce, or modify this document in whole or part, an acknowledgement of the authors of the document and all applicable portions of the copyright notice must be clearly referenced. All Rights Reserved.

© 2012-2018 SDxCentral, LLC, All Rights Reserved. SDNCentral™, the SDNCentral logo, SDxCentral™, SDxCentral logo, SDxNews™, SDxTech™, SDx™, the SDx logo, and DemoFriday™ are trademarks of SDxCentral, LLC in the U.S. and other countries.

  • Terms of Service
  • Privacy

Please enter your Business Email to view this asset:

We are requesting you provide a valid business, education, non-profit or government email address not from free or temporary email providers or ISPs. If you feel that our filters are incorrectly disallowing your email, please contact us at support@sdxcentral.com.