IoT Devices Are the Major Security Sources of Compromises – The News Bird
• Gain visibility into every device on your network. Deploy systems capable of reviewing and analyzing network logs to gain a comprehensive understanding of all devices interacting across your infrastructure and their activities.
• Alternately, change all default credentials. While password control is not always practicable, a necessary first step when implementing corporate-owned IoT devices is to reset passwords and implement two-factor authentication.
• Numerous industries, most notably manufacturing and healthcare, rely on IoT devices to run their daily operations.
• Maintain regular updates and patches. Maintain awareness of newly found vulnerabilities and keep your device’s security up to abreast with the current patches.
• The only approach to prevent shadowing IoT systems from posing a threat to enterprise networks is to eliminate implicit trust policies and strictly limit access to critical data via dynamic identity-based authentication, sometimes referred to as zero trusts.
• Establish a security architecture based on zero trusts.
• Apply stringent controls to your company assets to ensure that people and devices only have access to what they require and only after identification.
• Restriction of communication to necessary IP addresses, ASNs, and ports for external access.
• Unauthorized IoT applications that demand internet access should be subjected to traffic analysis and denied access to all company data, preferably via a proxy.