IoT Security Architecture and Policy for the Enterprise - a Hub Based Approach - 15 Nov 2018

Aimed at a wide audience including CxOs and IoT purchasers, IT departments, developers and OEM product management, the IoT Security Foundation security architecture series intends to:

• Reduce/manage complexity of IoT systems by simplifying implementation options
• Demonstrate what a good security regime looks like, by example
• Explain the benefits of a hub-based approach including achieving security goals, maintaining system hygiene and resilience, managing extensions and life-cycle provisioning

This architecture focuses on IoT devices and solutions implemented and managed by the enterprise. The document first explores what a ‘hub architecture’ is in an enterprise environment, and how this supports the key security principles promoted by the IoT Security Foundation. The paper also includes sections on:

• The threat assessment
• Hub-based reference architecture
• Network management and security
• Connecting devices securely
• Lifecycle management