Tenable Supports the IoT Standards Leadership Act
The IoT Standards Leadership Act would require the U.S. Department of Commerce to report on U.S. engagement in international IoT standards-setting bodies and their effectiveness for cybersecurity. Here’s why it matters.
The modern attack surface is growing faster than ever before, enabled in large part by the explosion of mobile computers, smartphones and Internet of Things (IoT) devices like the weather monitoring systems on the electric grid and the sensors connected to industrial control systems to make factories and warehouses run smoothly.
In fact, the Ericsson Internet of Things Forecast predicts there will be 18 billion IoT-related connected devices by 2022. While the exponential increase in IoT devices is enabling organizations to improve services and efficiency, it also widens the Cyber Exposure gap for users and provides bad actors with easy access to unsecured devices.
As the global use of IoT devices continues to grow, the U.S. has a responsibility to help develop strong IoT security standards. We must maintain leadership on this important issue, and that includes supporting international, multi-stakeholder standards development processes with respect to internet-connected devices. These processes can help enable further innovation, while strengthening security.
Tenable supports the IoT Standards Leadership Act recently introduced by Representatives Doris Matsui (D-CA) and Michael McCaul (R-TX), which would require the U.S. Department of Commerce to conduct a study of international IoT standards-setting bodies and organizations, and their effectiveness. These findings would further guide U.S. engagement with stakeholders to promote and strengthen international standards.
This legislation is an important step toward ensuring the U.S. is part of the process to develop international, consensus-driven IoT standards and will help prevent country-specific standards from hindering the progress of American innovation. The development of effective, international IoT standards will support global collaboration on the establishment of secure operations through strong encryption, network security and cyber hygiene.
At Tenable, we know firsthand how the increase in connected devices creates Cyber Exposure challenges. Effective U.S. engagement in international standards development will help address these challenges and make for a safer future. Through this important legislative effort, and the work of the private sector, the U.S. can play a leadership role in the creation of an interoperable, safe and secure future for these powerful emerging technologies. Leveraging private-public partnerships will remain a vital piece of securing IoT devices around the world, and Tenable looks forward to working with our partners in government and industry to ensure these devices can provide incredible benefits while minimizing the risk to users.
Learn More:
Related Articles
Cybersecurity Snapshot: Russia-backed Hackers Aim at Critical Infrastructure Orgs, as Crypto Fraud Balloons
September 13, 2024Critical infrastructure operators must beware of Russian military hacking groups. Plus, cyber scammers are having a field day with crypto fraud. Meanwhile, AI and cloud vendors face stricter reporting regulations in the U.S. And get the latest on AI-model risk management and on cybersecurity understaffing!
Cybersecurity Snapshot: RansomHub Group Triggers CISA Warning, While FBI Says North Korean Hackers Are Targeting Crypto Orgs
September 6, 2024Cybersecurity teams must beware of RansomHub, a surging RaaS gang. Plus, North Korea has unleashed sophisticated social-engineering schemes against crypto employees. Meanwhile, a new SANS report stresses the importance of protecting ICS and OT systems. And a Tenable poll sheds light on cloud-native VM. And much more!
Cybersecurity Snapshot: Schools Suffer Heavy Downtime Losses Due To Ransomware, as Banks Grapple with AI Challenges
August 30, 2024The cost of ransomware downtime in schools gets pegged at $500K-plus per day. Meanwhile, check out the AI-usage risks threatening banks’ cyber resilience. Plus, Uncle Sam is warning about a dangerous Iran-backed hacking group. And get the latest on AI-system inventories, the APT29 nation-state attacker and digital identity security!
CloudImposer: Executing Code on Millions of Google Servers with a Single Malicious Package
September 16, 2024Tenable Research discovered a remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) that is now fixed and that we dubbed CloudImposer. The vulnerability could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool. Tenable Research also found risky guidance in GCP documentation that customers should be aware of.
Cybersecurity Snapshot: Russia-backed Hackers Aim at Critical Infrastructure Orgs, as Crypto Fraud Balloons
September 13, 2024Critical infrastructure operators must beware of Russian military hacking groups. Plus, cyber scammers are having a field day with crypto fraud. Meanwhile, AI and cloud vendors face stricter reporting regulations in the U.S. And get the latest on AI-model risk management and on cybersecurity understaffing!
Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
September 10, 2024Microsoft addresses 79 CVEs with seven critical vulnerabilities and four zero-day vulnerabilities, including three that were exploited in the wild.
- Government
- Legislation
- Threat Intelligence
- Threat Management
- Vulnerability Management
- Vulnerability Scanning