IoT security workshop for product managers
summary
Connected products need secure identity and integrity baked into requirements across design, supply chain, production and cloud rather than left to engineering later. Practical issues covered include key provisioning (HSMs impractical for many SMEs, use asymmetric to inject symmetric keys), adding a reputable crypto chip (about 18–19 cents in volume) versus costly recalls, long product lifecycles (10–25 years), and a femtocell example where 50–60,000 units required coordinated end‑of‑life and patching. Data residency, key escrow and patch SLAs are treated as product decisions.
AI-written summary · about
chapters (21)
- 0:00Product management needs security
- 1:47Connected products and hacking risks
- 3:34Lean product development challenges
- 5:20Security fundamentals for IoT
- 6:45Supply chain and cloud impact
- 8:54Hardware supply chain security
- 10:18Production security and key management
- 12:23Deployment and platform choices
- 14:08Cloud decisions and customer data
- 16:35Customer data privacy and GDPR
- 17:38Key management strategies
- 19:24Outsourcing risks and lock-in
- 20:28Ongoing support and security patches
- 21:54Long-term product lifecycle support
- 23:43Product recalls and security costs
- 26:14Balancing security and business costs
- 28:43Vulnerability policies and management
- 30:10Product development as a system
- 31:57Business decisions in security
- 33:00Security frameworks as requirements
- 34:02Summary
related talks
30mSupply Chain Security for IoT Devices
31mSecuring the Internet of Things
25mSecuring the Internet of Things - An analyst's view on the market
45mBuilding a Secure IoT Device
18mBeyond the Default Password: Building Trustworthy IoT Products
48mCXO PANEL: Security Certifications for IoT Devices
22mSecuring IoT for Life: Navigating the Challenge of Constant Change
42mThe Security We Need: Designing Usable IoT Security