--- title: "IoT Security: Cloud Security Alliance Shows a Way" description: CSA hopes its move will provide actionable and useful IoT security guidance image: https://businessinsights.bitdefender.com/hubfs/16203260320_3b7bc32962_b-1.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) [#Enterprise Security](https://businessinsights.bitdefender.com/topic/enterprise-security) [#Privacy and Data Protection](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) By [**George V. Hulme**](https://businessinsights.bitdefender.com/author/george-v-hulme) / Oct 13, 2016 # IoT Security: Cloud Security Alliance Shows a Way Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/iot-security-cloud-security-alliance&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/iot-security-cloud-security-alliance&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/iot-security-cloud-security-alliance&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/iot-security-cloud-security-alliance&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/iot-security-cloud-security-alliance&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/iot-security-cloud-security-alliance&utm_medium=social&utm_source=facebook) **CSA hopes its move will provide actionable and useful IoT security guidance** Late last week the Cloud Security Alliance (CSA) released an IoT security guidance report, [Future-proofing the Connected World: 13 Steps to Developing Secure IoT Products](https://cloudsecurityalliance.org/download/future-proofing-the-connected-world/), that  aims to help IoT devices makers and service providers to better understand the most essential security measures they must incorporate if their devices are to be reasonably hardened against attack.  This is one of the most important topics in IT and cybersecurity right now. As [covered in our post](https://businessinsights.bitdefender.com/iot-internet-of-threats?hsLang=en-us), the IoT will soon become the biggest vector of attacks on companies, as the number of connected devices is set to reach between 20 billion and 50 billion units by 2020. And that Gartner [predicts](http://www.gartner.com/newsroom/id/3291817) by 2020 more than 25 percent of identified attacks on enterprises will involve the IoT. Last month, the security news site KrebsOnSecurity.com was hit by the largest distributed denial-of-service (D-DoS) attack the Internet company Akamai had witnessed. The attack was based on the attackers having hijacked hundreds of thousands, perhaps a million, IoT connected devices and converted them into bots used to create the traffic in the tremendous attack. Not good. Because our manufacturing, supply chains, transportation, and healthcare devices will be connected at at-risk IoT security is something we have to get right. Brian Russell is Chair IoT Working Group, and the group consists of 30 group members who contributed to development of the 80-page guidance. Russell said in this [statement](https://cloudsecurityalliance.org/media/news/csa-internet-of-things-working-group-releases-industrys-first-guidance-for-securing-iot-product-ecosystem/) on the nature of the guidance. “It is often heard in our industry that securing IoT products and systems is an insurmountable effort. However, with the help of our extremely knowledgeable and dedicated volunteers, we are providing a strong starting point for organizations that have begun transforming their existing products into IoT-enabled devices, as well as newly emerging IoT startups,” Russell said. The goal, he said, is to make it easier for developers and others to develop their own security strategy, and help mitigate the most pressing IoT risks. The report details 13 considerations and guidance for designing and developing secured IoT, as well as to mitigate the more common security issues associated with IoT development. The CSA also provided the top five security considerations, when heeded, should immediately and substantially improve IoT security.  Additionally, the report lays out guidance in the following seven areas:  - A discussion on IoT device security challenges. - Results from an IoT security survey conducted by the CSA IoT Working Group. - A discussion on security options available for IoT development platforms. - A categorization of IoT device types and a review of a few threats. - Recommendations for secure device design and development processes. - A detailed checklist for security engineers to follow during the development process. - A set of appendices that provide examples of IoT products mapped to their relevant threats. ### Explore More Topics - [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [Network Security Spending Rises as Business Environments Grow Too Complex for Traditional Endpoint Security](https://businessinsights.bitdefender.com/network-security-spending-rises-as-business-environments-grow-too-complex-for-traditional-endpoint-security?hsLang=en-us) ### [Cloud Security Alliance Provides Enhanced IoT Security Guidance](https://businessinsights.bitdefender.com/cloud-security-alliance-provides-enhanced-iot-security-guidance?hsLang=en-us) ### [IoT Security: A Call to Action for Improved Vulnerability Disclosure](https://businessinsights.bitdefender.com/iot-security-a-call-to-action-for-improved-vulnerability-disclosure?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "George V. Hulme", "url" : "https://businessinsights.bitdefender.com/author/george-v-hulme" }, "datePublished" : "2016-10-13T13:55:22.000Z", "headline" : "IoT Security: Cloud Security Alliance Shows a Way", "image" : [ "https://businessinsights.bitdefender.com/hubfs/16203260320_3b7bc32962_b-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/iot-security-cloud-security-alliance", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```