Insecure IoT --- Bennette, this seems to be understood by some regulators now - but still very few of them (US, UK, Singapore, Finland, EU). Besides understanding the risk from insecure IoT on the market, we need to set baseline requirements that vendors should comply with, one ways to test them, and device policies that would incentivize producers to embed security (eg. through procurement policies), increase demand of the users, etc - all this while not endangering own industries and markets. Some industries are also now realising that secure IoT is their responsibility and market advantage - which can stimulate other industries to follow. This takes time and requires comprehensive and multistakeholder approach.

Source author: Vladimir Radunovic vladar@diplomacy.edu