Kuwaiti Prime Minister Receives GCC Secretary General    Education Minister Meets with Chairman of Italian Thought and Research Center    Custodian of the Two Holy Mosques Chairs Cabinet's Virtual Session    Saudi Stock Exchange Main Index Ends Trading Lower at 10,761 Points    HRH Crown Prince Congratulates President of Central African Republic on Republic Day    Saudi Hind Al-Showaier Elected Regional Director of World Federation of the Deaf    KSrelief Covers Annual Expenses for Orphaned, Needy Students in Albanian Islamic Sheikhdom Schools    Russia Records 32,648 New Cases of COVID-19, 1,229 Deaths    Japan Confirms First Case of Omicron Variant of Coronavirus    World's first living robots can now reproduce, scientists say    Chinese president pledges one billion COVID-19 vaccine doses to Africa    Actor hatched 'secret plan' for hate hoax    Are Indians unable to laugh at themselves?    UN chief calls for nuclear weapons-free Middle East    Dr. Carboni: 4 museums to be set up in two years    MHRSD resolves dispute between employer and Filipino housemaids    El-Sisi inaugurates EDEX 2021; tours Saudi pavilion    Coronavirus pandemic could cost global tourism $2 trillion this year    Jeddah receiving world's greatest drivers in preparation for Formula1 Grand Prix    Trailblazer Juffali named ambassador for Formula 1 STC Saudi Arabian Grand Prix    Aramco awards contracts worth $10bn for vast Jafurah field development    Dr. Al-Sheikh, Japanese envoy discuss promotion of scientific and research cooperation    Saudi national team golfers in action in both Thailand & Bahrain    Iraq Records 826 New COVID-19 Cases    Saudi Stock Exchange Main Index Ends Trading Higher at 10,810 Points    Saudi Film Commission launches strategy to develop cinema sector    Saudi Film Commission launch its strategy to develop film and cinema sector    Saudi Arabia Dakar Rally route unveiled; 430 vehicles to take part    Launch of Fintech Tour Activities in Participation of SAMA, CMA and MCIT    Jeddah Corniche Circuit attracts world attention as first Saudi Arabian GP nears    Saudi Stock Exchange Main Index Ends Trading Lower at 10,787 Points    Dar AL-Hekma University Celebrates General Education    Riyadh Season to host @Hack as biggest cybersecurity event in region    'Disability reminds us that there is no such thing as normal'    Bollywood superstar Salman Khan to dazzle Riyadh Season on Dec. 10    President, CEO of Saudi Arabian Fencing Federation to Participate in International Fencing Federation Congress    Al-Hilal Wins AFC Champions League 2021    United Through Sports World Virtual Youth Festival Kicks off Tomorrow in Turaif District    SAFF Announces First Female Coach for KSA's First Women's Team    First Full International Marathon in Saudi Arabia to be Held in March 2022    Winter Wonderland Circus Amazes Audience with Thrilling Acrobatic Shows    Bollywood star's 'India got freedom in 2014' remark stirs controversy    23 Saudi women obtain favorable verdicts in 'adhl' lawsuits    Bride's fingerprint not required in revised e-marriage contract    Pilgrims Perform Dhuhr and Asr Prayers at Arafat Holy Site    Council of Senior Scholars: Muslim Brothers' Group Don't Represent Method of Islam, rather only Follows its Partisan Objectives, Violating our Graceful Religion    Eid Al-Adha Prayer Performed at the Grand Holy Mosque    Pilgrims Perform Dhuhr and Asr Prayers in Arafat Holy Site    







Thank you for reporting!
This image will be automatically disabled when it gets reported by several people.



Securing IoT is an inclusive process: Report
Published in The Saudi Gazette on 10 - 06 - 2017

THE INTERNET OF THINGS (IoT) continues to gain a strong footing in the GCC across different sectors ranging from manufacturing and transportation to energy. The vulnerability of IoT to external cyber threats remains high — in fact even higher than traditional IT — a recent Booz Allen Hamilton report has highlighted.
[caption id="attachment_150876" align="alignright" width="300"] Danny Karam[/caption]
The Booz Allen Hamilton IoT Field Guide also states that industries are moving to IoT at a pace that is far greater than the ability to secure it. Traditional IT systems are generally self-contained and easy to protect. IoT, on the other hand, connects systems with tens of thousands of sensors and other devices around the world, resulting in a much higher variety and volume of potential threat.
Saudi Arabia is looking to establish a $100 billion ‘Vision Fund' that will be devoted to IoT and technological development. This underscores the substantial growth that is expected to occur in the Kingdom over the coming years. However, as connectivity increases so, too, does the potential damage from events like the Shamoon virus and the global ‘WannaCry' ransomware attack.
Despite the exceptional efforts to remediate and protect systems after the 2012 Shamoon attack in the Kingdom, the virus resurfaced in January of this year, leaving three government agencies and four private sector companies offline for more than 48 hours. It is essential to build advanced security measures into the growth structure of traditional IT as well as IoT frameworks in order to contend within the dynamic cyber threat landscape.
Companies can probably save money by building IoT systems with less-than-secure parts and materials. But if they get hacked, the financial cost of reputational harm — including lawsuits, or regulatory penalties — could make it much worse for them.
If organizations are to succeed with IoT — security has to be deeply embedded in their DNA. This involves a close, careful, and systematic examination of all potential weak points.
Dr. Raymond Khoury, executive vice president and digital practice lead at Booz Allen Hamilton, MENA, said: "IoT is fast becoming a part of every industry and nearly every aspect of our everyday lives – from connected cars and smart buildings, to intelligent homes and even medical devices like pacemakers and insulin pumps.
"It is imperative that organizations visualize and understand the complex interconnections and intricacies of IoT to help identify where potential weaknesses and vulnerabilities lie so that adequate security efforts can be implemented in time. They need to understand that security cannot be an afterthought – it has to be part of everything you do with IoT."
Booz Allen Hamilton has identified that organizations with the best IoT security are proactive —they use real-time threat-assessment data and the latest advances in analytics to spot hidden IoT attacks. The IoT Field Guide includes a ‘Resource Prioritization Model' that can help organizations mitigate and contain any risks. The model contains three elements — the technical risk assessment, the potential impact of an attack on the business, and mitigation strategies. The comprehensive model ultimately empowers an organization's leaders and stakeholders to make effective IoT security investment decisions.
The process of building the model makes sure that different teams understand their interdependent risks, technologies, and investments and it helps serve as a common platform for IoT security dialogue across the enterprise.
More importantly, the model is an inclusive process that involves stakeholders from across the organization, including human resources, security, IT, law and compliance, and vendor sourcing.
Once developed, the model becomes a living tool – one that's regularly evaluated, updated, and discussed as part of the organization's broader security processes.
Danny Karam, vice president and digital life platform lead at Booz Allen Hamilton MENA, emphasizes: "It is not enough that organizations discuss cyber threats in the IoT context. They must formalize them into clear policies that everyone will follow. This involves considering the real cost, buying hardware from manufacturers that can help scale their IoT systems, ensuring that their software and hardware aren't connected to their IoT systems unless they are secure and, finally, incorporating solid fundamental cyber security practices across all levels."
Booz Allen Hamilton has been at the forefront of strategy and technology for more than 100 years. Today, the firm provides management and technology consulting and engineering services to leading Fortune 500 corporations, governments, and not-for-profits across the globe.
In the Middle East and North Africa (MENA) region, Booz Allen builds on six decades of experience partnering with public and private sector clients to solve their most difficult challenges through a combination of business strategy, digital innovation, data analytics, cybersecurity and resilience, operations, supply chain, organization and culture, engineering and life-cycle project management expertise.


Clic here to read the story from its source.