4 4.1 4.2 4.3 Key Initiatives Inventory of Key Initiatives Application-Specific Initiatives Key Findings 31 31 34 35 5 5.1 5.2 5.3 5.4 5.5 5.6 5.7 5.8 5.9 5.10 5.11 5.12 IoT Security Challenges Cybersecurity and Privacy by Design IoT Security Standards and Guidelines Evaluation and Certification Future-Proof Legislation Responsible Industry Ecosystem Supply Chain Security Product Lifecycle Support Device Identity and Root of Trust Secure OS, Cloud and Applications Secure Communications and Infrastructure Security Monitoring and Analytics Interdependencies in IoT Security 37 37 41 44 47 49 51 56 59 68 72 78 80 6 Conclusions and Recommendations 83 Annex A – IoT Security in Smart Mobility and Smart Health 87 Annex B – Catalogue of Key Initiatives 93 7

Select target paragraph3