Practical Internet of Things Security - Second Edition

Auditing and accountability

Auditing and accountability checks within a PIA are to ascertain what safeguards and security controls are needed, and when, from the following perspectives:

• Insider and third-party auditing addresses which organizations and/or agencies provide oversight
• Forensics
• Technical detection of information (or information system) misuse (for example, a host auditing tool detects database access and a large query not emanating from the application server)
• Security awareness, training processes, and supporting policies for those with direct or indirect access to the PII
• Modifications to information-sharing processes, organizations with whom information is shared, and approval of any changes to policy (for example, if the ...