Practical Internet of Things Security - Second Edition

Defining, planning, and executing an IoT incident response

IoT incident response and management can be broken down into four phases:

• Planning
• Detection and analysis
• Containment, eradication, and recovery
• Post-incident activity

The following diagram provides a view into the processes and how they relate to one another:

Any organization should have, at a minimum, these processes well documented and tailored for its unique system(s), technologies, and deployment approaches.