On 19 November 2019, the European Union Agency for Network and
Information Security (ENISA) released its report 'Good
practices for security of Internet of Things (IoT)' (Report),
providing a comprehensive analysis of security concerns surrounding
IoT, secure Software Development Life Cycle (sSDLC) principles, and
setting out best practices. Below, we highlight some of the key
points. The Report can be read in full here.
Background
IoT refers to a network of internet-connected devices, ranging
from microwaves to phones to smart homes. ENISA is tasked with
improving the resilience of Europe's critical information
infrastructure and networks, and the Report focuses on establishing
good practices for securing the IoT software development process.
As a precursor to the Report, in 2017, ENISA released its study
'Baseline Security Recommendations for IoT' (here).
