Question

A manufacturing enterprise is deploying thousands of Internet-connected sensors (IoT devices) across its production floor to enable real-time monitoring. Many of these devices ship with limited processing power, cannot run endpoint agents, and receive infrequent firmware updates from the vendor. The risk practitioner is asked to recommend the control that best limits the enterprise's exposure to the compromise of these devices. Which recommendation should the risk practitioner make FIRST?

Accepted Answer

Isolate the IoT devices on a dedicated, segmented network zone with tightly restricted traffic to and from production systems

Answer

Deploy the same endpoint detection and response (EDR) agents used on corporate workstations onto each IoT device

Answer

Require the vendor to provide a SOC 2 Type II report before the devices are connected

Answer

Purchase cyber insurance to transfer the financial impact of an IoT-related breach