Press Room

Guidance to help organizations improve endpoint security

BOSTON, MA – OCTOBER 17, 2022 – The Industry IoT Consortium® (IIC®) announced it has published the Automated Onboarding and Device Provisioning Best Practices whitepaper. Intended for system integrators, service providers, and those who implement industrial IoT solutions, the paper offers security best practices and standards for automated device onboarding and provisioning.

“Endpoint security protection is a challenging area for the industrial IoT,” said Keao Caindec, Chair of the IIC’s Security Working Group and CEO and Principal Analyst at Farallon Technology Group. “Devices deployed in the field may not have the necessary computing power or hardware compared to their counterparts sitting in the central office. Organizations must vet any equipment added to the network when onboarded through device or equipment provisioning.”

IoT devices are deployed on the remote edge of the service area and are more vulnerable due to their visibility, limited hardware, and software capabilities. The devices require services to ensure end-to-end security protection to mitigate risks and defend against malicious attacks.

“Security-by-design is the best and most straightforward approach to secure a system because organizations can embed security at the beginning of the concept, architecture, and design process. We hope this paper will serve as a guide in the area of life cycle management of secure identities, especially provisioning from device production through owner change and into service, all while doing this at scale,” said John Fornehed, lead author of the IIC whitepaper, Expert IoT Technologies, Ericsson.

The IIC Security Working Group developed the whitepaper. Please download the Automated Onboarding and Device Provisioning Best Practices whitepaper from the IIC website for more information and a complete list of the authors.

Industry IoT Consortium

The Industry IoT Consortium delivers transformative business value to industry, organizations, and society by accelerating the adoption of a trustworthy internet of things. The Industry IoT Consortium is a program of the Object Management Group (OMG).

Note to editors:  Industry IoT Consortium is a registered trademark of OMG. For a listing of all OMG trademarks, visit https://www.omg.org/legal/tm_list.htm. All other trademarks are the property of their respective owners.