News Feature | November 30, 2015

FTC Emphasizes Need For IoT Security

Christine Kern

By Christine Kern, contributing writer

FTC Emphasizes Need For IoT Security

The Federal Trade Commission is stressing the importance of security with Internet of Things (IoT) solutions.

“The only way for the Internet of Things to reach its full potential for innovation is with the trust of American consumers,” said FTC Chairwoman Edith Ramirez. “We believe that by adopting the best practices we’ve laid out, businesses will be better able to provide consumers the protections they want and allow the benefits of the Internet of Things to be fully realized.”

The FTC’s new “Start With Security” series of conferences is designed to provide companies with practical tips and strategies for implementing effective IoT data security. Based on the FTC’s Report on the Internet of Things, released last January, these events communicate a series of concrete steps that can be taken to ensure the safety of data and enhance consumers’ privacy.

The FTC recommends the following for companies developing Internet of Things devices:

  • Build security into devices at the outset
  • Train employees about the importance of security, and ensure that security is managed at an appropriate level in the organization
  • Ensure that when outside service providers are hired, that those providers are capable of maintaining reasonable security, and provide reasonable oversight of the providers
  • When a security risk is identified, consider a “defense-in-depth” strategy whereby multiple layers of security may be used to defend against a particular risk
  • Consider measures to keep unauthorized users from accessing a consumer’s device, data, or personal information stored on the network
  • Monitor connected devices throughout their expected life cycle, and where feasible, provide security patches to cover known risks.

In addition to the report, the FTC also released a new publication for businesses containing advice about how to build security into products connected to the Internet of Things. “Careful Connections: Building Security in the Internet of Things” encourages companies to implement a risk-based approach and take advantage of best practices developed by security experts, such as using strong encryption and proper authentication.