Cyber Defense eMagazine May 2019

necessarily ensure security. 14% of cell phone users admit to never updating their software and 28% do
not lock their smartphone (Anderson and Olmstead, 2017).
Conclusion
The government, especially NIST, has taken strides to identify and mitigate IoT security concerns, but is
yet to be seen how effective the DHS Cybersecurity Strategy, the Cyber Shield Act of 2017, NISTIR 8200
and 8222 are at this point. The NIST RMF, already a standard for systems security in the government,
could be introduced as a proven process for securing IoT. Alternatively, non-profit organizations like
Underwriters Laboratories and JCAHO have a definitive history of providing needed services to users by
establish their own accepted standards for safety. Whether the government or an independent
organization take the reins, it will be necessary to adopt security standards and mandate their use in
establishing a base-level of security to protect consumers and secure IoT devices. While we have options
for developing those standards and processes, the problem of keeping those devices secure in perpetuity
in lieu of updates, upgrades and modifications will remain the primary challenge.
References
Anderson, M. and Olmstead, K. (2017). Many smartphone owners don’t take steps to secure their
devices. Retrieved from http://www.pewresearch.org/fact-tank/2017/03/15/many-smartphone-ownersdont-take-steps-to-secure-their-devices/
Internet Archive Wayback Machine. (2002). Underwriters Labs3. UL's Standards for Safety Standards
Catalog. Retrieved from
https://web.archive.org/web/20021105130017/http://ulstandardsinfonet.ul.com/catalog/stdscatfra
me.html
NIST (2018). Interagency Report on Status of International Cybersecurity Standardization for the Internet
of Things (IoT). Retrieved from
https://csrc.nist.gov/CSRC/media/Publications/nistir/8200/draft/documents/nistir8200-draft.pdf
NIST (2018). Internet of Things (IoT) Trust Concerns: NIST Releases Draft NISTIR 8222 for Comment.
Retrieved from https://www.nist.gov/news-events/news/2018/09/internet-things-iot-trust-concerns-nistreleases-draft-nistir-8222-commentUnderwriters
Labs. (n.d) Our Mission: Working for a Safer World.
Retrieved from https://www.ul.com/aboutul/our-mission/
96