Leaders’ Perspectives on IoT Security Risk Management Strategies in Surveyed Organizations Relative to IoTSRM2

Traian Mihai Popescu,Alina Madalina Popescu,Gabriela Prostean

doi:10.3390/app11199206

Traian Mihai Popescu, Alina Madalina Popescu + Show 1 more

Open Access

https://doi.org/10.3390/app11199206

Copy DOI

Journal: Applied sciences	Publication Date: Oct 3, 2021
Citations: 1	License type: CC BY 4.0

Affiliation: Polytechnic University of Timişoara

Abstract

In the COVID-19 and post-pandemic business environment, leveraging robust Internet of Things (IoT) security risk management strategies becomes of particular importance to IoT adopters. Thus, given that no research study was found to exclusively focus on the current state of IoT security risk management strategies in organizations, this article aims to support IoT security practitioners to peer benchmark and enhance their IoT security risk management strategies. In a nutshell, this study relies on a mixed methods research methodology, and its main contribution is the determination of the current state of the IoT security risk management strategies in the surveyed organizations relative to our IoT Security Risk Management Strategy Reference Model (IoTSRM2). Hence, this study entails designing and conducting a survey, analyzing survey responses, and reporting survey results based on our IoTSRM2 and proposed three-phased survey methodology. Furthermore, before discussing the related work, this article provides our survey results for the surveyed large and small-medium organizations, the surveyed large organizations, and the surveyed large Technology, Media, and Telecom (TMT) organizations. For instance, our results reveal that while most surveyed organizations perform IoT risk assessments and focus on IoT infrastructure resilience, they fail in strategizing IoT governance and risk management, among others.

Highlights

These days, organizations from around the world leverage technological advances at an unprecedented pace [1]
Following our IoTSRM2-based survey, which was conducted between 14 June and 12 July 2021, Table 8 shows the key details on the responses to our IoTSRM2-based survey including the sampling frame of 1502 leaders and seniors with stake in cybersecurity and/or technology risk management strategies, the number of collected individual survey responses, the number of discarded surveys, the final sample of 31 leaders and seniors with stake in Internet of Things (IoT) security risk management strategies, and the survey response rate of 2.1%
For each of the surveyed organizations from each of the four regions of the world considered in our IoTSRM2-based survey, Figure 14 shows the corresponding IoTSRM2 compliance score and indicates whether this score is less than 50% or greater than or equal to 50%

Summary

Introduction

These days, organizations from around the world leverage technological advances at an unprecedented pace [1]. The COVID-19 pandemic has further fueled technical innovations and technological convergence, expedited digital connectivity in and around organizations, and made way for a greater international appetite towards remote everything (e.g., remote work, remote healthcare) [2]. In this context, this pandemic arguably acted as a catalyst for greater critical dependency on internet-based technologies [3] including, inter alia, some of the Internet of Things (IoT) technologies. There are numerous research studies that cover individual and various application areas of IoT. To inform about our IoTSRM2 and 13 Section 3.2.2: Figure 18

Objectives

Methods

Results

Conclusion