Practical Guide: IoT Cybersecurity & Privacy - Revision history

Pinfold at 05:02, January 25, 2023

2023-01-25T05:02:43Z

← Older revision		Revision as of 05:02, January 25, 2023
Line 10:		Line 10:
	\| summary = With the advent of IoT devices and their rapid and wide adoption in Smart Cities, municipalities face an urgent necessity to ensure the IoT-related ecosystems are trustworthy by design. New regulations will no doubt be enacted by the federal and local regulatory bodies in due time, but municipalities face an urgent need for practical guidance for built-in security and privacy protection.		\| summary = With the advent of IoT devices and their rapid and wide adoption in Smart Cities, municipalities face an urgent necessity to ensure the IoT-related ecosystems are trustworthy by design. New regulations will no doubt be enacted by the federal and local regulatory bodies in due time, but municipalities face an urgent need for practical guidance for built-in security and privacy protection.
	}}		}}
	~~__TOC__~~		__NOTOC__
	'''Whom is it intended for'''		'''Whom is it intended for'''

Pinfold at 19:00, April 10, 2022

2022-04-10T19:00:14Z

← Older revision		Revision as of 19:00, April 10, 2022
Line 8:		Line 8:
	\| document = 20170823-GCTC-PWSC-Public-WIFI-Blueprint-FINAL-v2.pdf		\| document = 20170823-GCTC-PWSC-Public-WIFI-Blueprint-FINAL-v2.pdf
	\| chapter = 9106		\| chapter = 9106
	\| summary = With the advent of IoT devices and their rapid and wide adoption in Smart Cities, municipalities		\| summary = With the advent of IoT devices and their rapid and wide adoption in Smart Cities, municipalities face an urgent necessity to ensure the IoT-related ecosystems are trustworthy by design. New regulations will no doubt be enacted by the federal and local regulatory bodies in due time, but municipalities face an urgent need for practical guidance for built-in security and privacy protection.
	face an urgent necessity to ensure the IoT-related ecosystems are trustworthy by design. New
	regulations will no doubt be enacted by the federal and local regulatory bodies in due time, but
	municipalities face an urgent need for practical guidance for built-in security and privacy
	protection.
	}}		}}
	__TOC__		__TOC__

Pinfold at 19:15, March 14, 2022

2022-03-14T19:15:32Z

← Older revision		Revision as of 19:15, March 14, 2022
Line 1:		Line 1:
	{{Chapter		{{Chapter
			\| image = IoTCybersecurityPrivacy.jpg
	\| blueprint = Wireless		\| blueprint = Wireless
	\| sectors = Wireless, Cybersecurity and Privacy		\| sectors = Wireless, Cybersecurity and Privacy

Pinfold at 18:53, March 14, 2022

2022-03-14T18:53:21Z

← Older revision		Revision as of 18:53, March 14, 2022
Line 7:		Line 7:
	\| document = 20170823-GCTC-PWSC-Public-WIFI-Blueprint-FINAL-v2.pdf		\| document = 20170823-GCTC-PWSC-Public-WIFI-Blueprint-FINAL-v2.pdf
	\| chapter = 9106		\| chapter = 9106
	}}		\| summary = With the advent of IoT devices and their rapid and wide adoption in Smart Cities, municipalities
	~~__TOC__~~
	~~'''The purpose of the chapter'''~~

	With the advent of IoT devices and their rapid and wide adoption in Smart Cities, municipalities
	face an urgent necessity to ensure the IoT-related ecosystems are trustworthy by design. New		face an urgent necessity to ensure the IoT-related ecosystems are trustworthy by design. New
	regulations will no doubt be enacted by the federal and local regulatory bodies in due time, but		regulations will no doubt be enacted by the federal and local regulatory bodies in due time, but
	municipalities face an urgent need for practical guidance for built-in security and privacy		municipalities face an urgent need for practical guidance for built-in security and privacy
	protection.		protection.
			}}
			__TOC__
	'''Whom is it intended for'''		'''Whom is it intended for'''

Pinfold at 09:02, January 8, 2022

2022-01-08T09:02:13Z

← Older revision		Revision as of 09:02, January 8, 2022
Line 1:		Line 1:
	{{Chapter		{{Chapter
	\| blueprint = Wireless		\| blueprint = Wireless
	\| sectors = Wireless		\| sectors = Wireless, Cybersecurity and Privacy
	\| authors = David Witkowski, Anton Batalla, Essam El-Beik, Benny Lee, Bill Pugh, Steve Wimsatt		\| authors = David Witkowski, Anton Batalla, Essam El-Beik, Benny Lee, Bill Pugh, Steve Wimsatt
	\| poc = David Witkowski		\| poc = David Witkowski

Pinfold: /* Appendix D: IoT-related Standards and Laws */

2022-01-08T08:32:09Z

Appendix D: IoT-related Standards and Laws

← Older revision		Revision as of 08:32, January 8, 2022
Line 518:		Line 518:
	*Coordinator. Supervises the manufacturing floor to address robot breakdown and disaster recovery.		*Coordinator. Supervises the manufacturing floor to address robot breakdown and disaster recovery.

	=Appendix D: IoT-related Standards and Laws=
			'''Appendix D: IoT-related Standards and Laws'''

	Many laws at the US federal level require that information systems protect sensitive data they		Many laws at the US federal level require that information systems protect sensitive data they
	store or process temporarily. Failure to comply with them may incur various consequences		store or process temporarily. Failure to comply with them may incur various consequences

Pinfold: /* Appendix C: Municipal Roles and Responsibilities */

2022-01-08T08:31:39Z

Appendix C: Municipal Roles and Responsibilities

← Older revision		Revision as of 08:31, January 8, 2022
Line 500:		Line 500:
	\|}		\|}

	=Appendix C: Municipal Roles and Responsibilities=		'''Appendix C: Municipal Roles and Responsibilities'''

	Personnel and Management Models		Personnel and Management Models
	*Privacy Officer - manages policies, coordinates audits		*Privacy Officer - manages policies, coordinates audits

Pinfold: /* Appendix D: IoT-related Standards and Laws */

2022-01-08T08:30:43Z

Appendix D: IoT-related Standards and Laws

← Older revision		Revision as of 08:30, January 8, 2022
Line 569:		Line 569:
	#'''Information security'''</br>Synonymous with cybersecurity		#'''Information security'''</br>Synonymous with cybersecurity

	[[~~Media~~:~~Synonymouswithcybersecurity~~.jpg\|center\|800px\|Synonymous with cybersecurity]]		[[File:Synonymous with cybersecurity.jpg\|center\|800px\|Synonymous with cybersecurity]]

Pinfold: /* Appendix D: IoT-related Standards and Laws */

2022-01-08T08:30:04Z

Appendix D: IoT-related Standards and Laws

← Older revision		Revision as of 08:30, January 8, 2022
Line 569:		Line 569:
	#'''Information security'''</br>Synonymous with cybersecurity		#'''Information security'''</br>Synonymous with cybersecurity

	[[Media:~~Synonymous with cybersecurity~~.jpg\|center\|800px\|Synonymous with cybersecurity]]		[[Media:Synonymouswithcybersecurity.jpg\|center\|800px\|Synonymous with cybersecurity]]

Pinfold: /* Appendix D: IoT-related Standards and Laws */

2022-01-08T08:29:43Z

Appendix D: IoT-related Standards and Laws

← Older revision		Revision as of 08:29, January 8, 2022
Line 567:		Line 567:
	#'''Information systems'''</br>The term information systems are defined in 44 U.S.C. §3502 as “a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information,” where information resources are “information and related resources, such as personnel, equipment, funds, and information technology.”		#'''Information systems'''</br>The term information systems are defined in 44 U.S.C. §3502 as “a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information,” where information resources are “information and related resources, such as personnel, equipment, funds, and information technology.”
	#'''Cybersecurity'''</br>Thus cybersecurity, a broad and arguably somewhat fuzzy concept for which there is no consensus definition, might best be described as measures intended to protect information systems—including technology (such as devices, networks, and software), information, and associated personnel—from diverse forms of attack. The concept has, however, been characterized in various ways. For example, the interagency Committee on National Security Systems has defined it as “the ability to protect or defend the use of cyberspace from cyberattacks,” where cyberspace is defined as “a global domain within the information environment consisting of the interdependent network of information systems infrastructures including the Internet, telecommunications networks, computer systems, and embedded processors and controllers”. [http://www.cnss.gov/Assets/pdf/cnssi_4009.pdf Committee on National Security Systems, National Information Assurance (IA) Glossary, April 2010, Information security.]</br>In contrast, cybersecurity has also been defined as synonymous with information security (see, for example, S. 773, the Cybersecurity Act of 2010, in the 111 th Congress), which is defined in current law (44 U.S.C. §3532(b)(1)) as protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide— (A) integrity, which means guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity; (B) confidentiality, which means preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information; (C) availability, which means ensuring timely and reliable access to and use of information; and (D) authentication, which means utilizing digital credentials to assure the identity of users and validate their access.		#'''Cybersecurity'''</br>Thus cybersecurity, a broad and arguably somewhat fuzzy concept for which there is no consensus definition, might best be described as measures intended to protect information systems—including technology (such as devices, networks, and software), information, and associated personnel—from diverse forms of attack. The concept has, however, been characterized in various ways. For example, the interagency Committee on National Security Systems has defined it as “the ability to protect or defend the use of cyberspace from cyberattacks,” where cyberspace is defined as “a global domain within the information environment consisting of the interdependent network of information systems infrastructures including the Internet, telecommunications networks, computer systems, and embedded processors and controllers”. [http://www.cnss.gov/Assets/pdf/cnssi_4009.pdf Committee on National Security Systems, National Information Assurance (IA) Glossary, April 2010, Information security.]</br>In contrast, cybersecurity has also been defined as synonymous with information security (see, for example, S. 773, the Cybersecurity Act of 2010, in the 111 th Congress), which is defined in current law (44 U.S.C. §3532(b)(1)) as protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide— (A) integrity, which means guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity; (B) confidentiality, which means preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information; (C) availability, which means ensuring timely and reliable access to and use of information; and (D) authentication, which means utilizing digital credentials to assure the identity of users and validate their access.
	#'''Information security'''</br>:Synonymous with cybersecurity		#'''Information security'''</br>Synonymous with cybersecurity

	[[Media:Synonymous with cybersecurity.jpg\|center\|800px\|Synonymous with cybersecurity]]		[[Media:Synonymous with cybersecurity.jpg\|center\|800px\|Synonymous with cybersecurity]]