{"id":10101,"date":"2018-12-11T11:00:53","date_gmt":"2018-12-11T11:00:53","guid":{"rendered":"https:\/\/www.engineernewsnetwork.com\/blog\/?p=10101"},"modified":"2018-12-10T10:17:47","modified_gmt":"2018-12-10T10:17:47","slug":"iotsf-announces-major-update-to-the-iot-security-compliance-framework","status":"publish","type":"post","link":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/","title":{"rendered":"IoTSF announces major update to the IoT Security Compliance Framework"},"content":{"rendered":"<p>The <span class=\"highlight highlight-blue\"><a href=\"http:\/\/www.iotsecurityfoundation.org\" target=\"_blank\" rel=\"noopener\">IoT Security Foundation (IoTSF)<\/a><\/span> announces Release 2 of its IoT Security Compliance Framework following user feedback of the previous release.<\/p>\n<p>A significant enhancement is a move to a risk based approach that gives the Framework more flexibility and greater applicability beyond earlier versions, which were aimed at consumer-grade products.<br \/>\n<script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<ins class=\"adsbygoogle\" style=\"display: block; text-align: center;\" data-ad-layout=\"in-article\" data-ad-format=\"fluid\" data-ad-client=\"ca-pub-7565662001938327\" data-ad-slot=\"7585079586\"><\/ins><br \/>\n<script>\n     (adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><br \/>\nThe new and improved Framework is a practical tool for managers and developers who need to assure security, it could also be used as part of the purchasing function.<\/p>\n<figure id=\"attachment_10102\" aria-describedby=\"caption-attachment-10102\" style=\"width: 212px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/www.engineernewsnetwork.com\/blog\/wp-content\/uploads\/2018\/12\/IoTSF-IoT-Security-Compliance-Framework-Release-2.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-10102\" src=\"https:\/\/www.engineernewsnetwork.com\/blog\/wp-content\/uploads\/2018\/12\/IoTSF-IoT-Security-Compliance-Framework-Release-2-212x300.jpg\" alt=\"IoTSF announces major update to the IoT Security Compliance Framework\" width=\"212\" height=\"300\" \/><\/a><figcaption id=\"caption-attachment-10102\" class=\"wp-caption-text\">Move to a risk- based approach that gives the Framework more flexibility and greater applicability beyond earlier versions<\/figcaption><\/figure>\n<p>There are three escalating modes for IoT producers; as an internal assessment reference, a checklist to self-certify against, or by a third party conformity assessment body, potentially as part of an accredited certification scheme.<\/p>\n<p>The structured process of questioning and evidence gathering encourages optimal security mechanisms and practices to be implemented regardless of target application. Existing users of the Framework will be able to adopt the new release seamlessly as it is backward compatible.<\/p>\n<p>\u201cThere are lots of freely available descriptive white papers on IoT security, yet what that means for businesses is often unclear,\u201d says Richard Marshall, Plenary Chair of IoTSF. \u201cWorking with our members, which include security experts and product engineers, the IoTSF Compliance Framework brings system and business facets together to provide a complete view of security.<\/p>\n<p>\u201cA major improvement in this release is the move to a risk based approach, meaning the Framework is as applicable to medical and industrial applications, as it is to the original consumer market. It is not only freely available, it is highly applicable and fully actionable.\u201d<\/p>\n<p>Alongside the Framework is a companion questionnaire, which is used to record evidence of conformity. Each tab in the questionnaire corresponds to sections in the Framework, where supporting evidence is referenced.<\/p>\n<p>A revised version of the questionnaire accompanies release 2 and includes a simple tool to configure the strength of the three security goals of confidentiality, integrity and availability, which collectively determine the compliance class.<\/p>\n<p>\u201cWe\u2019ve received a lot of positive feedback from existing users of the Framework, and the great news today is that we\u2019ve just made it a whole lot better,\u201d adds John Moor, <span class=\"highlight highlight-blue\"><a href=\"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-publishes-enterprise-iot-security-architecture-and-policy-whitepaper\/\" target=\"_blank\" rel=\"noopener\">IoTSF<\/a><\/span> Managing Director. \u201cWe\u2019re calling on business and industry to \u2018make it safe to connect\u2019 \u2013 make use of the Framework and our guidance materials and get on the front foot when it comes to security. We\u2019re specifically inviting test labs and the test community to make use of the Framework to provide manufacturers with a common reference for third party certification.\u201d<\/p>\n<p>The IoT Security Compliance Framework Revision 2 and the Questionnaire are free to download <span class=\"highlight highlight-blue\"><a href=\"http:\/\/www.iotsecurityfoundation.org\/best-practice-guidelines\" target=\"_blank\" rel=\"noopener\">HERE<\/a><\/span>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The IoT Security Foundation (IoTSF) announces Release 2 of its IoT Security Compliance Framework following user feedback of the previous release. A significant enhancement is a move to a risk based approach that gives the Framework more flexibility and greater applicability beyond earlier versions, which were aimed at consumer-grade products. The new and improved Framework &hellip;<\/p>\n","protected":false},"author":1,"featured_media":10102,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[199],"tags":[5326,5261],"class_list":["post-10101","post","type-post","status-publish","format-standard","has-post-thumbnail","","category-news-views-and-opinion","tag-iot-security-foundation","tag-iotsf"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>IoTSF announces major update to the IoT Security Compliance Framework - Engineer News Network<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IoTSF announces major update to the IoT Security Compliance Framework - Engineer News Network\" \/>\n<meta property=\"og:description\" content=\"The IoT Security Foundation (IoTSF) announces Release 2 of its IoT Security Compliance Framework following user feedback of the previous release. A significant enhancement is a move to a risk based approach that gives the Framework more flexibility and greater applicability beyond earlier versions, which were aimed at consumer-grade products. The new and improved Framework &hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/\" \/>\n<meta property=\"og:site_name\" content=\"Engineer News Network\" \/>\n<meta property=\"article:published_time\" content=\"2018-12-11T11:00:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.engineernewsnetwork.com\/blog\/wp-content\/uploads\/2018\/12\/IoTSF-IoT-Security-Compliance-Framework-Release-2-e1544437047274.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"590\" \/>\n\t<meta property=\"og:image:height\" content=\"398\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/#\\\/schema\\\/person\\\/4477342aea8e299c6a21761e513ea8e1\"},\"headline\":\"IoTSF announces major update to the IoT Security Compliance Framework\",\"datePublished\":\"2018-12-11T11:00:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/\"},\"wordCount\":475,\"image\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/12\\\/IoTSF-IoT-Security-Compliance-Framework-Release-2-e1544437047274.jpg\",\"keywords\":[\"IoT Security Foundation\",\"IoTSF\"],\"articleSection\":[\"News, Views and Opinion\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/\",\"url\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/\",\"name\":\"IoTSF announces major update to the IoT Security Compliance Framework - Engineer News Network\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/12\\\/IoTSF-IoT-Security-Compliance-Framework-Release-2-e1544437047274.jpg\",\"datePublished\":\"2018-12-11T11:00:53+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/#\\\/schema\\\/person\\\/4477342aea8e299c6a21761e513ea8e1\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/12\\\/IoTSF-IoT-Security-Compliance-Framework-Release-2-e1544437047274.jpg\",\"contentUrl\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/12\\\/IoTSF-IoT-Security-Compliance-Framework-Release-2-e1544437047274.jpg\",\"width\":590,\"height\":398,\"caption\":\"Move to a risk- based approach that gives the Framework more flexibility and greater applicability beyond earlier versions\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IoTSF announces major update to the IoT Security Compliance Framework\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/\",\"name\":\"Engineer News Network\",\"description\":\"The ultimate online news and information resource for today's engineer\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/#\\\/schema\\\/person\\\/4477342aea8e299c6a21761e513ea8e1\",\"name\":\"admin\",\"url\":\"https:\\\/\\\/www.engineernewsnetwork.com\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"IoTSF announces major update to the IoT Security Compliance Framework - Engineer News Network","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/","og_locale":"en_GB","og_type":"article","og_title":"IoTSF announces major update to the IoT Security Compliance Framework - Engineer News Network","og_description":"The IoT Security Foundation (IoTSF) announces Release 2 of its IoT Security Compliance Framework following user feedback of the previous release. A significant enhancement is a move to a risk based approach that gives the Framework more flexibility and greater applicability beyond earlier versions, which were aimed at consumer-grade products. The new and improved Framework &hellip;","og_url":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/","og_site_name":"Engineer News Network","article_published_time":"2018-12-11T11:00:53+00:00","og_image":[{"width":590,"height":398,"url":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-content\/uploads\/2018\/12\/IoTSF-IoT-Security-Compliance-Framework-Release-2-e1544437047274.jpg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/#article","isPartOf":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/"},"author":{"name":"admin","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/#\/schema\/person\/4477342aea8e299c6a21761e513ea8e1"},"headline":"IoTSF announces major update to the IoT Security Compliance Framework","datePublished":"2018-12-11T11:00:53+00:00","mainEntityOfPage":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/"},"wordCount":475,"image":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/#primaryimage"},"thumbnailUrl":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-content\/uploads\/2018\/12\/IoTSF-IoT-Security-Compliance-Framework-Release-2-e1544437047274.jpg","keywords":["IoT Security Foundation","IoTSF"],"articleSection":["News, Views and Opinion"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/","url":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/","name":"IoTSF announces major update to the IoT Security Compliance Framework - Engineer News Network","isPartOf":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/#primaryimage"},"image":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/#primaryimage"},"thumbnailUrl":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-content\/uploads\/2018\/12\/IoTSF-IoT-Security-Compliance-Framework-Release-2-e1544437047274.jpg","datePublished":"2018-12-11T11:00:53+00:00","author":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/#\/schema\/person\/4477342aea8e299c6a21761e513ea8e1"},"breadcrumb":{"@id":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/#primaryimage","url":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-content\/uploads\/2018\/12\/IoTSF-IoT-Security-Compliance-Framework-Release-2-e1544437047274.jpg","contentUrl":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-content\/uploads\/2018\/12\/IoTSF-IoT-Security-Compliance-Framework-Release-2-e1544437047274.jpg","width":590,"height":398,"caption":"Move to a risk- based approach that gives the Framework more flexibility and greater applicability beyond earlier versions"},{"@type":"BreadcrumbList","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/iotsf-announces-major-update-to-the-iot-security-compliance-framework\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.engineernewsnetwork.com\/blog\/"},{"@type":"ListItem","position":2,"name":"IoTSF announces major update to the IoT Security Compliance Framework"}]},{"@type":"WebSite","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/#website","url":"https:\/\/www.engineernewsnetwork.com\/blog\/","name":"Engineer News Network","description":"The ultimate online news and information resource for today's engineer","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.engineernewsnetwork.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.engineernewsnetwork.com\/blog\/#\/schema\/person\/4477342aea8e299c6a21761e513ea8e1","name":"admin","url":"https:\/\/www.engineernewsnetwork.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/posts\/10101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/comments?post=10101"}],"version-history":[{"count":1,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/posts\/10101\/revisions"}],"predecessor-version":[{"id":10103,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/posts\/10101\/revisions\/10103"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/media\/10102"}],"wp:attachment":[{"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/media?parent=10101"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/categories?post=10101"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.engineernewsnetwork.com\/blog\/wp-json\/wp\/v2\/tags?post=10101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}