https://www.channelfutures.com/wp-content/themes/channelfutures_child/assets/images/logo/footer-new-logo.png
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • Complete 2023 MSP 501 Rankings
    • 2023 MSP 501 50-1
    • 2023 MSP 501 100-51
    • 2023 MSP 501 150-101
    • 2023 MSP 501 200-151
    • 2023 MSP 501 250-201
    • 2023 MSP 501 300-251
    • 2023 MSP 501 350-301
    • 2023 MSP 501 400-351
    • 2023 MSP 501 450-401
    • 2023 MSP 501 501-451
    • NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Channel Futures 20: Top Tech Providers
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2023 Editorial Calendar
  • Awards
    • Back
    • 2023 MSP 501
    • 2023 NextGen 101
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Technology Advisor 101 (TA 101)
    • Channel Leaders Lists
  • Events
    • Back
    • 2024 CP Expo Call for Speakers
    • Channel Futures Leadership Summit
    • MSP Summit
    • CP Conference & Expo
    • Channel Partners Europe
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
Channel Futures
  • NEWSLETTER
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • Complete 2023 MSP 501 Rankings
    • 2023 MSP 501 50-1
    • 2023 MSP 501 100-51
    • 2023 MSP 501 150-101
    • 2023 MSP 501 200-151
    • 2023 MSP 501 250-201
    • 2023 MSP 501 300-251
    • 2023 MSP 501 350-301
    • 2023 MSP 501 400-351
    • 2023 MSP 501 450-401
    • 2023 MSP 501 501-451
    • NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Channel Futures 20: Top Tech Providers
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2023 Editorial Calendar
  • Awards
    • Back
    • 2023 MSP 501
    • 2023 NextGen 101
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Technology Advisor 101 (TA 101)
    • Channel Leaders Lists
  • Events
    • Back
    • 2024 CP Expo Call for Speakers
    • Channel Futures Leadership Summit
    • MSP Summit
    • CP Conference & Expo
    • Channel Partners Europe
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
    • Newsletter
  • REGISTER
  • MSPs
  • VARs / SIs
  • Agents
  • Cloud Service Providers
  • Channel Partners Events
 Channel Futures

MSSP Insider


Shutterstock

IoT Security

How to Mitigate IoT Security Risks

  • Written by Gary Hayslip
  • January 28, 2019
Education and strong cyber hygiene are key to making sure IoT users remain safe.
Webroot's Gary Hayslip

Gary Hayslip

The question for this edition of “Ask the Security Expert” comes to us from Jaymes Alvarez of IMT Services Corp., who asks, “How do you mitigate the security risks of IoT?” It’s a great question – and one that so many organizations have contemplated for years. As any organization knows, great connectivity comes with great responsibility.

As we think through steps to mitigate the security risks associated with the IoT, it’s important to be aware of the potential dangers users may be exposed to – and from there, take the necessary steps to minimize the risk. Given recent hype and the security risks associated with the IoT, it’s clear that more work needs to be done to better protect the security of connected devices.

Today’s IoT devices are used across almost all industries, including all the big players such as manufacturing, agriculture, health care and energy. If a cyberattack were to affect one of these industries, it could potentially take down the operations of an entire country or business.

Unique IoT Challenges

Let’s take a look at the health-care industry. In terms of vulnerability, this industry is very high on the list as it’s in the business of protecting human life. Medical professionals will forever remember the WannaCry attack that wreaked havoc on hospitals around the globe and crippled their computer systems.

Making matters worse, last year the FDA confirmed that St. Jude had used implantable cardiac devices on patients, such as defibrillators and pacemakers, that carried a vulnerability that would allow the device to be hacked. The sheer thought of someone being able to “hack your body,” especially a major organ, is terrifying. Imagine the outcome if a sitting president or world leader was to need such a device and it was comprised by another attacking country. That’s just two examples of how critical it is that we work to make sure that we protect the security of IoT.

It was evident to me during my previous role as the CISO of San Diego and now as a CISO for a leading cybersecurity company that smart city networks pose a unique challenge to the industry, as they are comprised of a mix of legacy and new technology working together. Although we value these streamlined connections, they also can leave the network open to serious risk as these systems are often connected to larger integrated networks. If compromised, they can act as a key to grant access toward even larger security incidents. For example, a standard phishing email targeting an unexpecting network administrator could compromise an entire network if the correct controls are not in place to stop ransomware from spreading.

In the consumer landscape, IoT devices consist of smart speakers and TVs, wearables, routers, appliances, etc. Aside from being the new home trend amongst the tech-savvy crowd, they generally work to make our lives a little easier. Devices such as Amazon Alexa or the Google Home are popular and can be connected to several aspects of your life ranging from a user’s personal calendar to music, mood lighting and more. Another popular consumer IoT device is the smart door lock, granting users the ability to safeguard their homes from far away – several of which come with the added protection of a security camera and a speaker box for communication purposes. If hacked, these smart locks would instead function as a high-tech key, compromising the user’s home security and literally opening their front door to threats.

Cyber-Hygiene Training Is Key

To best defend against IoT risk, organizations need to follow basic cyber-hygiene best practices and continually monitor for changes. This includes network segmentation, patch management, backups, data encryption and employee education programs – all of which need to be done on a regular basis. Needless to say, any employee or contractor with access to an organization’s networks should go through extensive and regular security awareness training in several key areas:

  •  Cybersecurity basics: Encryption, ransomware and cybercrime; examples of major recent cyberattacks; how to keep information safe and help prevent future attacks.
  •  Password security: Best practices; the importance of strong and unique passwords (remember length, not complexity or variety of characters, is the most important factor in password security).
  •  Phishing awareness: Risks stemming from phishing and social engineering attacks; common and new phishing techniques; how to spot and respond to email, phone and website phishing attempts.
  •  Social media awareness: The risks associated with sharing different types of personal information and using social media at work; how personal and corporate accounts should be used differently; the corporate social media policy.
  •  Understanding malware: The various types of malware; the prevalence of polymorphic malware; what to do in the case of an infection.
  •  The dangers of installing unauthorized software: Risks involving malicious websites and malicious software; best practices for software management; how to detect and avoid malicious websites.
  •  Physical access security: How to properly secure work areas and computers in-office and while traveling; security best practices for visitors.

As the use of IoT increases, it’s imperative that we work to make sure that all devices are secure, and both education and using our best cyber-hygiene will be the key to making sure that we are safe. Unfortunately, there isn’t a silver bullet to protect all IoT devices, but as users we can do our best to be sure we’re checking all the boxes we have at our disposal

Gary Hayslip is responsible for the development and implementation of all information security strategies, including Webroot’s security standards, procedures and internal controls. As CISO, he also contributes to product strategy to guide the efficacy of Webroot’s security portfolio. He previously was CISO of the city of San Diego and held infosec roles with the U.S. Navy and the federal government. Follow Hayslip on Twitter @ghayslip or on LinkedIn.

Tags: MSPs Endpoint MSSP Insider Network Security Training and Policies

Most Recent


  • Cisco acquisition of Splunk gets partner reaction
    Partners Hope Splunk Keeps 'Pace of Innovation' in Cisco Acquisition
    All will be well if Cisco integrates Splunk the way it integrated Meraki, a partner told Channel Futures.
  • Cisco's Splunk acquisition a bombshell
    Cisco's Splunk Acquisition 'True Bombshell Move,' Will Have Massive Impact on Cybersecurity
    The combination should present immediate upsell opportunities.
  • SMB, Cisco SMB
    Cisco SMB Business Gets Updated Sales Coverage Model, New Investments
    Cisco partners are marketing to clients that need technology outcomes just as much as the enterprise but lack the same IT staffing.
  • Brand Storytelling
    Learn to Create, Capture and Curate Stories for Your Brand
    The first step is developing your own stories. These are about how your company was formed, who founded it and why it was created.

Leave a comment Cancel reply

-or-

Log in with your Channel Futures account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • Security Vulnerability
    Older Fortinet Vulnerabilities Lead to Attack on Local Government Office
  • Threats
    Cybersecurity and Threat Protection: MSSPs, Get Your Advice Here
  • DevSecOps
    ServiceNow, Microsoft Set to Deliver Broad SecOps Integration
  • Dunce Cap Businessman
    Tired of MSSPs ‘Failing,’ Nuspire Debuts Platform to Combat Cyberattacks

Upcoming Events

View all

Channel Futures Leadership Summit

October 30, 2023 - November 2, 2023

Channel Partners Conference & Expo

March 11, 2024 - March 14, 2024

Channel Futures Leadership Summit 2024

September 17, 2024 - September 19, 2024

Galleries

View all

Broadcom-VMware Hits Snag in China as IT Incurs Too-High Cloud Costs

September 22, 2023

Cisco’s Splunk Acquisition ‘True Bombshell Move,’ Will Have Massive Impact on Cybersecurity

September 21, 2023

Cisco SMB Business Gets Updated Sales Coverage Model, New Investments

September 21, 2023

Industry Perspectives

View all

Why Conversational AI Matters for Your Customers and How It Can Boost Your Revenue

September 15, 2023

The 5 Ds that Lead to Unplanned Business Sales

September 13, 2023

Hot Generative AI Market Must ‘Cool Down’

August 28, 2023

Webinars

View all

MSP 501: Leadership in Cybersecurity

October 19, 2023

DE&I: Find the Balance that Works for You

September 7, 2023

Above and Beyond with the NextGen 101ers

August 30, 2023

White Papers

View all

6 UCaaS Reseller Challenges and How Real World Businesses Solved Them

February 1, 2023

Frost Radar: North American UCaaS Market, 2022

February 1, 2023

The Complete Guide to White-Label UCaaS for Reseller Success

February 1, 2023

Channel Futures TV

View all

Coffee with Craig and James Episode 129: ZLH Enterprises

Coffee with Craig and James Episode 128: Channel Partner Strategies Intelligence Service

August 25, 2023

Coffee with Craig and James Episode 127: Expereo, Movie Night Returns

August 18, 2023

Coffee with Craig and James Episode 126: ARG

July 28, 2023

MSP 501

The industry's largest and most comprehensive partner awards program.

Newsletters and Updates

Sign up for The Channel Report, Channel Futures Update, MSP 501 Newsletter and more.

Live Channel Events

Get the latest information on the next industry-leading Channel Partners event.

Galleries

Educational slide shows and images from live events.

Media Kit And Advertising

Want to reach our audience? Access our media kit.

DISCOVER MORE FROM INFORMA TECH

  • Channel Partners Events
  • Telecoms.com
  • MSP 501
  • Black Hat
  • IoT World Today
  • Omdia

WORKING WITH US

  • Contact
  • About Us
  • Advertise
  • Newsletter

FOLLOW Channel Futures ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2023 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X