Practical Industrial Internet of Things Security

Establishing an IIoT security team

Security is sustained by accountability. A security team takes responsibility for defining and executing a security program. IIoT security team members should include both IT and OT security professionals, and also management- and executive-level stakeholders. Depending on an organization's size and resources, the team members may be either dedicated or part-time. Some organizations may want to engage third-party security consultants during the formative stages of a security program or may partner with an external security organization.

The security team needs to clearly define the roles and responsibilities of individual members. The team is also accountable for assessing the end-to-end security posture ...