1.3 JUSTIFICATION AND METHODOLOGY Data for this study was collected as follows. 1. Desk research and analysis focusing on publications from governments, standards development organisations, and industry, as well as scientific publications. 2. Interactive sessions including workshops, panel discussions and International IoT Security Roundtables27 featuring participants from government, industry and academia. 3. Consultations with experts and policymakers from organisations including Singapore’s Cyber Security Agency 28, the Ministry of Economic Affairs of the Netherlands29, the Netherlands National Cyber Security Centre30, Germany’s BSI31, and the UK Department for Digital, Culture, Media & Sport (DCMS)32. Based on the collected data, we identify fundamental IoT security challenges and map them to three problem spaces. We summarise recent developments related to each challenge and derive conclusions and actionable recommendations based on our findings. We also identify priority challenges based on input from experts in government, academia and industry. While every effort is made to ensure that information is up-to-date, the IoT space continues to grow exponentially and we cannot guarantee completeness of coverage, particularly regarding initiatives and technology developments. 14 27 28 29 30 31 32 1.4 TARGET AUDIENCE This report presents a wide-ranging discussion on the IoT security la­ndscape and provides findings and recommen­ dations towards securing IoT ecosystems to support policy initiatives and to inform the industry as well as interested stakeholders. Hence, the target audience includes government and industry bodies as well as vendors of IoT products and services, and organisations responsible for IoT security. This report is also useful for executives responsible for IT and/or innovation activities in their organisations, such as Chief Information Security Officers (CISOs). 1.5 LANDSCAPE STUDY STRUCTURE The chapters in this study are organised as follows. – Chapter 2: Definitions and concepts used in this study. – Chapter 3: Specific challenges in IoT security, and a survey of expert opinions on the importance of each challenge given the current state of the art. – Chapter 4: Overview of key initiatives that contribute to one or more of the identified challenges. – Chapter 5: Discussions on each challenge, including a description of the current landscape and recent developments. – Chapter 6: Conclusions and recommendations towards a more secure IoT ecosystem. https://www.sicw.sg/iot https://www.csa.gov.sg/ https://www.government.nl/ministries/ministry-of-economic-affairs-and-climate-policy https://english.ncsc.nl/ https://www.bsi.bund.de/EN/TheBSI/thebsi_node.html https://www.gov.uk/government/organisations/department-for-digital-culture-media-sport