Re: [Iotops] Brendan Slide 4 --- Path Forward

I agree, we should be surprised if there's anything that deviates from what
we already have; I think we're in pretty good shape overall. For the sake
of completeness, I'm going to shamelessly copy NIST's reference table,
because it's quite thorough.

Hopefully this clarifies things.

Brendan

AGELIGHT: AgeLight Digital Trust Advisory Group, “IoT Safety Architecture &
Risk Toolkit (IoTSA) v3.1” [http://agelight.com/iot.html]
BITAG: Broadband Internet Technical Advisory Group (BITAG), “Internet of
Things (IoT) Security and Privacy Recommendations” [
https://www.bitag.org/documents/BITAG_Report_-_Internet_of_Things_(IoT)_Security_and_Privacy_Recommendations.pdf
]
CSA: Cloud Security Alliance (CSA) IoT Working Group, “Identity and Access
Management for the Internet of Things” [
https://cloudsecurityalliance.org/download/identity-and-access-management-for-the-iot/
]
CSDE: Council to Secure the Digital Economy (CSDE), “The C2 Consensus on
IoT Device Security Baseline Capabilities” [
https://securingdigitaleconomy.org/wp-content/uploads/2019/09/CSDE_IoT-C2-Consensus-Report_FINAL.pdf
]
CTIA: CTIA, “CTIA Cybersecurity Certification Test Plan for IoT Devices,
Version 1.0.1” [https://www.ctia.org/about-ctia/test-plans/]
ENISA: European Union Agency for Network and Information Security (ENISA),
“Baseline Security Recommendations for IoT in the context of Critical
Information Infrastructures” [
https://www.enisa.europa.eu/publications/baseline-security-recommendations-for-iot
]
ETSI: European Telecommunications Standards Institute (ETSI), “Cyber
Security for Consumer Internet of Things” [
https://www.etsi.org/deliver/etsi_ts/103600_103699/103645/01.01.01_60/ts_103645v010101p.pdf
]
GSMA: Groupe Spéciale Mobile Association (GSMA), “GSMA IoT Security
Assessment” [https://www.gsma.com/iot/iot-security-assessment/]
IEC: International Electrotechnical Commission (IEC), “IEC 62443-4-2,
Edition 1.0, Security for industrial automation and control systems – Part
4-2: Technical security requirements for IACS components” [
https://webstore.iec.ch/publication/34421]
IIC: Industrial Internet Consortium (IIC), “Industrial Internet of Things
Volume G4: Security Framework” [https://www.iiconsortium.org/IISF.htm]
IoTSF: IoT Security Foundation (IoTSF), “IoT Security Compliance Framework,
Release 2” [https://www.iotsecurityfoundation.org/best-practice-guidelines/]
ISOC/OTA: Internet Society/Online Trust Alliance (OTA), “IoT Security &
Privacy Trust Framework v2.5” [
https://www.internetsociety.org/resources/doc/2018/iot-trust-framework-v2-5/
]
NEMA: National Electrical Manufacturers Association (NEMA), “Cyber Hygiene
Best Practices” [
https://www.nema.org/Standards/Pages/Cyber-Hygiene-Best-Practices.aspx]
OCF: Open Connectivity Foundation (OCF) “OCF Security Specification Version
2.1.2” [
https://openconnectivity.org/specs/OCF_Security_Specification_v2.1.2.pdf]
PSA: Platform Security Architecture (PSA) Joint Stakeholder Agreement (JSA)
Members, “PSA CertifiedTM Level I Questionnaire, Version 2.0 Beta” [
https://www.psacertified.org/security-certification/psa-certified-level-1]

On Thu, Mar 30, 2023 at 10:22 PM Michael Richardson <mcr+ietf@sandelman.ca>
wrote:
>
>
> Michael Richardson <mcr+ietf@sandelman.ca> wrote:
>     > For IoTSF, you won't find anything new, as it mostly refers to ETSI
and
>     > IEC documents.  For IEC maybe you are referring to
>     > https://en.wikipedia.org/wiki/IEC_62443
>
> We'll have to do some kind of liason dance to get uniform access to this.
>
> --
> Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
>            Sandelman Software Works Inc, Ottawa and Worldwide
>
>
>
>
> --
> Iotops mailing list
> Iotops@ietf.org
> https://www.ietf.org/mailman/listinfo/iotops