Internet of Things (IoT) Assessment

The Internet of Things (IoT) Assessment is a risk and control evaluation tailored for device developers and control systems settings, aiming to gauge the risks linked to the company’s connected devices. Coastline collaborates with the Client to pinpoint potential threats in devices and ensure secure data flows across the supply chain. In today’s digital landscape, characterized by automation, analytics, cloud computing, cyber-physical systems, and IoT, the ease of creating new business models and their flexible delivery also brings the risk of malicious activity.

How We Do It

Coastline IoT assessment continuously assesses the organization’s risk by identifying vulnerabilities and detecting threats across and within the environment. Our experienced team follows the OWASP Internet of Things Security Verification Standard (ISVS) to guard against software-only attacks, which are attacks that do not require physical access to the device.

Every Coastline IoT engagement looks to identify each of the following items:

Weak/Guessable/Hardcoded Passwords
Insecure Network Services
Insecure Ecosystem Interfaces
Lack of Secure Update Mechanism
Use of Insecure or Outdated Components
Insufficient Privacy Protection
Insecure Data Transfer and Storage
Lack of Device Management
Insecure Default Settings
Lack of Physical Hardening

Additionally, Coastline includes level-one criteria that is intended to provide the Client with a security baseline for connected devices in which a device’s physical penetration does not have a significant security impact. These are devices where the IP address should not be secured, no sensitive data should be stored on the device, and a compromise of one device does not allow an attacker to migrate laterally to additional IoT devices or systems.

What To Expect

Throughout the IoT testing process, Coastline ensures transparency by providing the Client with a clear outline of the steps, processes, and methodologies employed. Our team meticulously documents and reports successful breach attempts, exploitable vulnerabilities, and other relevant data discovered during the assessment.

Upon completion of our assessment of the current IoT device, we will provide you with a detailed report of the findings as well as best practice recommendations to enhance the security around your IoT devices environment. The deliverable will provide the Client with valuable information on the current state of the security that exists within the organization, the presence of vulnerabilities, and additional information on the level of risk each vulnerability represents.

Internet of Things (IoT) Assessment