3.4 EXPERT OPINIONS ON PRIORITY CHALLENGES As described in Chapter 1, this study makes extensive use of material gathered during interactive sessions with cybersecurity and IoT practitioners and policymakers. The sessions included workshops, panel discussions and International IoT Security Roundtables58, and expert opinions were sought from a number of individuals and several organisations including Singapore’s Cyber Security Agency59, the Ministry of Economic Affairs of the Netherland 60, the Netherlands National Cyber Security Centre61, the UK Department for Digital, Culture, Media and Sport62, and Germany’s BSI63. To determine the relative importance of each challenge and thereby identify priority challenges for policymakers and industry, a number of experts were surveyed. They were asked which of the identified IoT security challenges are, in their opinion, the most relevant and urgent given the current state of IoT security; their responses are summarised in the chart below. Each respondent chose up to 3 priority challenges. 28 58 59 60 61 62 63 As Figure 7 on the next page reveals, there is a wide range of opinions among the expert community on which challenges are most critical; indeed, this is reflective of the nebulous state of IoT security today. Having said that, it is clear that the community expects security to be built into IoT devices and ecosystems by design. The development of effective evaluation and certification schemes built upon widely-accepted security standards (themselves based on sound cybersecurity and privacy principles) is increasingly seen as a cornerstone of IoT security, as is the establishment of a secure supply chain and managed device lifecycle. The security of the hardware devices is also seen by the expert community as important; in particular, the hardware root of trust is emphasised by security practitioners in the field. The streamlining of monitoring efforts with the supply chain and lifecycle challenges represents a key opportunity. These inputs suggest that certain security challenges should be addressed on a priority basis; this is discussed in the conclusion of this study after an examination of the current landscape and recent developments related to each challenge. https://www.sicw.sg/iot https://www.csa.gov.sg/ https://www.government.nl/ministries/ministry-of-economic-affairs-and-climate-policy https://english.ncsc.nl/ https://www.gov.uk/government/organisations/department-for-digital-culture-media-sport https://www.bsi.bund.de/EN/TheBSI/thebsi_node.html