IR-1005 CSA IoT Security Controls Framework

Presented at Texas Cyber Summit 2019, Oct. 10, 2019, 4:45 p.m. (60 minutes)

Cloud Security Alliance - CSA The Internet of Things (IoT) Security Controls Framework introduces the base-level security controls required to mitigate many of the risks associated with an IoT system that incorporates multiple types of connected devices, cloud services, and networking technologies. The IoT Security Controls Framework provides utility across many IoT domains from systems processing only “low-value” data with limited impact potential, to highly sensitive systems that support critical services. The Framework also helps users identify appropriate security controls and allocate them to specific components within their IoT system. I will review the following: How to Use the CSA IoT Security Controls Framework; typical IoT system components, understanding the Objectives, System Risk Impact Levels, Implementation Guidance, with discussion of many real life challenges at all 7 layers with a Security-by-Design approach.

Presenters:

  • Mark Szewczul
    Mark is a Principal IIoT Security Architect with over 20 years of experience mastering numerous aspects of hardware design, system integration, pentesting and SDLC. His passion entails implementing best practices of security, privacy and safety principles at all 7-layers and beyond. Mark is a Key Contributor as Security Research Volunteer in the IoT Working Group of the Cloud Security Alliance. He has his MSEE in Information Science and Systems from Texas A&M University and the CISSP certification. Mark also has 3 patents and has published and presented several times.

Links:

Similar Presentations: