November 2018
Intermediate to advanced
382 pages
11h 20m
English
Content preview from Practical Internet of Things Security - Second Edition
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Executive oversight
Given its normalization as a critical business function, compliance and risk management requires executive oversight and governance from multiple departments. Organizations that do not have executive-level interest, policy mandates, and monitoring put their investors and customers at much greater risk when easily prevented breaches occur.
The following organizational functions and departments should be included in the governance model for IoT operations:
- Legal and privacy representation
- Information technology/security
- Operations
- Safety engineering
Executive governance—if not already mandated by an industry requirement (for example, PCI DSS)—should include some type of approval authority to operate an IoT system. Any ...