3 IOT SECURITY PROBLEM SPACES AND CHALLENGES This study identifies 11 cybersecurity challenges in the IoT landscape based on a review of existing literature as well as expert input from the International IoT Security Roundtables and conversations with practitioners and policymakers during and after the Roundtables.55 Figure 6 maps the identified challenges to three problem spaces: Principles, Governance and Legislation; Ecosystem Development; and Technical References and Standards. This study explores these IoT security challenges in a domain-agnostic manner, with IoT devices modelled as generic resource-constrained devices that require security controls. Orthogonal to the generic approach would be a domain-specific approach; a given domain can impose specific physical and technological constraints and have specific security requirements. We briefly address in Annex A the IoT security requirements in two rapidly-growing domains: smart mobility and smart health. PRINCIPLES, GOVERNANCE AND LEGISLATION Cybersecurity and Privacy by Design ECOSYSTEM DEVELOPMENT TECHNICAL REFERENCES AND STANDARDS IoT Security Standards and Guidelines Evaluation and Certification Future-Proof Legislation Responsible Industry Ecosystem Device Identity and Root of Trust Secure OS, Cloud and Applications Secure Communications and Infrastructure Security Monitoring and Analytics Supply Chain Security Product Lifecycle Support Figure 6: IoT Security Problem Spaces and Challenges 55 https://www.sicw.sg/iot 25