Practical Internet of Things Security - Second Edition

Managing compliance

Continuous monitoring for IoT security compliance is a challenge and will continue to be a challenge as regulators attempt to catch up with mapping and extending existing guidance to the IoT.

Compliance represents the security and policy requirements that are inherited and applicable to one's IoT deployment. From a security life-cycle perspective, compliance is wholly dependent on the specific industry regulatory environment and whether it is commercial or government. For example, devices and systems playing a role in credit and debit card financial transactions must adhere to the Payment Card Industry (PCI) series of standards for point-of-sale devices as well as core infrastructure. Military systems typically require ...