Security News > 2020 > June > Report: Most companies unaware of third-party IoT security measures
Only 37% of "High performer" organizations monitor the risk of IoT devices used by third parties, and current IoT risk-management programs can't keep pace, study said.
The report, A New Roadmap for Third Party IoT Risk Management, offered up a chart chronicling the differences between 2017, 2018, 2019, and 2020 in IoT and TPRM, and this year definitely shows an increase.
Respondents expect the number of IoT devices they rely on to double in the next couple of years, even though most respondents said unsecured IoT devices have become increasingly likely "To have materially disruptive consequences." Yet, nearly six of 10 acknowledge not knowing whether their third-party controls can actively suit their needs.
There is a general lack of awareness or adequate tools to indicate which IoT device has appropriate security, and just how many actual breaches and cyberattacks are linked to IoT devices is likely much higher than the number of events reported.
"This is especially true when the use of IoT devices is extended to third parties, fourth parties, or even more concerning, when it's unknown where the use of IoT devices are being extended, or those extensions are unmanaged."