IoT security: challenges and solutions

Connected products are complex to secure, and a vulnerability can put safety and privacy at risk. Discover how cyber attacks compromise IoT systems and how to protect a product at every stage of its lifecycle, in a one-hour awareness session.

Express your interest!

IoT systems are complex and challenging to secure, and a vulnerability in a connected product can present a risk to safety and privacy, not only to data.

Participants discover the differences between IoT and IT security, see how cyber attacks compromise IoT systems, and learn the principles that protect a product at every stage of its lifecycle: devices, networks, mobile applications and cloud systems.

One hour. The awareness session covers the challenges, the threats and the principles, and can be deployed as a package on your internal training platform.

Audience: this course is ideal for non-technical participants such as project and product managers, executives, new IoT manufacturers and start-ups who want to learn the basics of IoT security. It is also built for developers and security experts who want to update their knowledge on IoT. No prior knowledge of cyber security is required.

The course integrates elements of the ENISA IoT guidelines, the OWASP IoT Top 10, and the requirements that EN 303 645 and the Cyber Resilience Act place on products.

Objectives

  • Understand the security challenges of IoT systems and how they differ from IT.

  • Get up to date with the latest threats and vulnerabilities affecting connected products.

  • Learn the good security practices and how they prevent cyber attacks.

Programme

  • Introduction to IoT systems and their differences with IT systems.

  • The security challenges of IoT: the threats to IoT systems and the risks to users, systems and society.

  • The principles that secure IoT systems, at every level: governance, organisation, operations and technology.

Practical information

How our training runs

All our courses are open to anyone with an interest in cyber security. Every course starts with the generic context, so that everyone begins on the same footing, and combines theory, practice and real-life scenarios.

  1. Delivery formats

    Awareness sessions are delivered remotely.

    Training courses are delivered remotely, on-site in your premises, or in a hybrid mode.

    Hands-on courses are delivered on-site in your premises only.

  2. Quality assurance

    Throughout the delivery our trainers remain accessible, and we are always happy to share our own experience in the field. Our objective is that every attendee gains something they can use in their daily activities.

    We commit to the highest possible standard before, during and after the training. Each course ends with a live debrief with the participants, followed by an anonymous survey to collect their feedback afterwards.

  3. Certificate of training

    For our training courses, every participant receives a certificate of training and a letter of completion, certifying that they followed the course and acquired knowledge they can use in their daily activities.

  4. Trainees and participants

    Our training and awareness courses are designed to develop new knowledge and skills in cyber security and cyber resilience. We develop our material for a specific audience, based on their level of knowledge and experience.

Next step

Beyond the training

The course gives your teams the skills. If you also need the work done, our services cover the assessment, the documentation and the support for your products.

CRA readiness Contact us