+SYS.4.4.A8 Procurement Criteria for IoT Devices [Procurement Department] (S)

SYS.4.4.A8 Procurement Criteria for IoT Devices [Procurement Department] (S)

The CISO SHOULD also be involved in procuring IoT devices that do not have any obvious IT functionality. Prior to procuring IoT devices, the security requirements they must meet SHOULD be specified. When procuring IoT devices, aspects of material security and requirements regarding the security characteristics of the devices' software SHOULD be sufficiently considered. A requirements list SHOULD be drawn up that can be used to evaluate the products available on the market.

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.14 Interception of Information / Espionage
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.28 Software Vulnerabilities or Errors