According to the cybersecurity and IT professionals surveyed, device manufacturers are falling short. Seventy two percent say they do not believe that manufacturers are implementing sufficient security measures in IoT devices
Is the Internet of Things safe? A new survey from global cybersecurity association ISACA suggests a major confidence gap about the security of connected devices between consumers and cybersecurity and information technology professionals.
According to the consumer segment of ISACA’s 2015 IT Risk/Reward Barometer, 81 percent of Indian consumers surveyed are confident they can control the security on the Internet of Things (IoT) devices they own. Yet according to the 7,016 IT and cybersecurity professionals globally who responded to a parallel survey, only 22 percent feel this same confidence about controlling who has access to information collected by IoT devices in their homes, and 72 percent say manufacturers are not implementing sufficient security in IoT devices.
The vast majority (95%) of Indian consumers consider themselves somewhat or very knowledgeable about the Internet of Things and report that the average estimated number of IoT devices in their home is seven. Smart TVs at 46% top the list of most wanted IoT device to get in the next 12 months, followed by smart watches (36%) and Internet-connected home alarm systems (29%).
While 84 percent of Indian consumers own at least one Internet of Things device, they are still wary of the related risks. A majority of respondents (80%) believe their credit / debit card information can be potentially collected via IoT and could be misused by cybercriminals. Additionally, 93% respondents believe hacking into an IoT device amounts to burglary.
The Hidden Internet of Things
ISACA’s survey of IT and cybersecurity professionals globally depicts an IoT that flies below the radar of many IT organizations – an invisible risk that survey respondents believe is underestimated and under-secured:
· 73 percent estimate the likelihood of an organization, being hacked through an IoT device is medium or high
· 63 percent think that the increasing use of IoT devices in the workplace has decreased employee privacy
· 50 percent say their organization’s BYOD (bring your own device) policy does not address wearable tech
According to the cybersecurity and IT professionals surveyed, device manufacturers are falling short. Seventy two percent say they do not believe that manufacturers are implementing sufficient security measures in IoT devices. Moreover 73% respondents don’t think current security standards in the industry sufficiently address the Internet of Things and believe that updates and/or new standards are needed. Privacy is also an issue; 84 percent believe that IoT device makers don’t make consumers sufficiently aware of the type of information the devices can collect.
“As the usage of IoT devices increases in India, it is important that device manufacturers adopt an industry-wide security standard that addresses IoT security. Furthermore, there is a need for them to install rigorous security governance and professional development for their cybersecurity employees. This move will further boost the acceptance of IoT in the country, as our research shows there is a direct relation between positive customer sentiment and companies that can demonstrate credentials,” said Avinash Kadam, Advisor – ISACA India Cybersecurity Initiative.
Ways for Enterprises to Maintain a Cyber-Secure Workplace
· Safely embrace IoT devices in the workplace to keep competitive advantage
· Ensure all workplace devices owned by organization are updated regularly with security upgrades
· Require all devices be wirelessly connected through the workplace guest network, rather than internal network
· Provide cyber security training for all employees to demonstrate their awareness of best practices of cyber security and the different types of cyberattacks.
