{"id":5253,"date":"2015-03-05T07:00:48","date_gmt":"2015-03-05T15:00:48","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=5253"},"modified":"2015-01-29T08:46:10","modified_gmt":"2015-01-29T16:46:10","slug":"internet-of-things-iot-and-security-should-the-ftc-police-data-security","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/internet-of-things-iot-and-security-should-the-ftc-police-data-security\/","title":{"rendered":"Internet of Things (IoT) and Security: FTC Prescribes Best Practices for Data Management"},"content":{"rendered":"<p>The <a title=\"FTC report on the Internet of Things Security\" href=\"http:\/\/www.ftc.gov\/system\/files\/documents\/reports\/federal-trade-commission-staff-report-november-2013-workshop-entitled-internet-things-privacy\/150127iotrpt.pdf\" target=\"_blank\">FTC recently released a report <\/a>that recommends\u00a0the following six best practices for managing Internet of Things data, recommendations that can really be applied to any type of data collection:<\/p>\n<ul>\n<li><strong>Security by Design.<\/strong> \u00a0Security should be an integral part of software and system design for handling data.<\/li>\n<li><strong>Personnel Policies.<\/strong> \u00a0Employees of businesses that have access to data should receive data security and handling training.<\/li>\n<li><strong>Service Providers.<\/strong> \u00a0Businesses should do due diligence to ensure that the service providers they engage with employ good levels of security.<\/li>\n<li><strong>Defense-in-Depth.<\/strong> \u00a0Businesses should consider adopting multiple layers of security defense.<\/li>\n<li><strong>Access Controls.<\/strong> \u00a0Data should be tagged with access controls that limit people from seeing only the data that they have a need to access.<\/li>\n<li><strong>Monitoring. \u00a0<\/strong>Businesses need to continually assess and amend their security policies. \u00a0They need to stay current with software releases, updates and patches.<\/li>\n<\/ul>\n<p><a title=\"Earl Perkins bio\" href=\"http:\/\/www.gartner.com\/analyst\/25748\/EarlPerkins\" target=\"_blank\">Earl Perkins<\/a>, an analyst at Gartner, <a title=\"IoT security\" href=\"http:\/\/blogs.wsj.com\/cio\/2015\/01\/27\/ftc-internet-of-things-report-offers-broader-security-lessons-for-cios\/\" target=\"_blank\">said that<\/a> &#8220;they\u2019re [the FTC] giving fair warning to those responsible for consumer services that how you use the data is something they\u2019re going to be watching carefully.&#8221;<\/p>\n<p>On the face of it, these recommendations seem like common sense. \u00a0Yet not everyone is happy with the report.<\/p>\n<p>The\u00a0<a title=\"Wall Street Journal on the Internet of Things\" href=\"http:\/\/blogs.wsj.com\/digits\/2015\/01\/27\/ftc-recommends-limits-on-data-collection-via-internet-of-things\/\" target=\"_blank\">Wall Street Journal reports<\/a>\u00a0that\u00a0<a title=\"Berin Szoka bio\" href=\"http:\/\/techfreedom.org\/staff\" target=\"_blank\">\u00a0Berin Szoka<\/a>, president of the think tank TechFreedom, said that &#8220;the FTC is trying to regulate the Internet of Things by stealth.&#8221;<\/p>\n<p>In particular, one contentious item is the recommendation that consumer information collection should be minimized where possible and that time limits should be put on how long consumer data can be retained by businesses.<\/p>\n<p><a title=\"Daniel Castro bio\" href=\"http:\/\/www.datainnovation.org\/\" target=\"_blank\">Daniel Castro<\/a>, Director of the Center for Data Innovation, said that &#8220;in calling for companies to reduce their use of data, the FTC misses the point that data is the driving force behind innovation in today\u2019s information economy&#8230; \u00a0I think they just don\u2019t fully understand the benefits. The whole point of [IoT] companies is they\u2019re trying to collect data. \u00a0That&#8217;s the model of innovation right now. And to just say \u2018don&#8217;t have it\u2019 ignores the reality of the technology today, it\u2019s in every industry.\u201d&#8221;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Finternet-of-things-iot-and-security-should-the-ftc-police-data-security%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>The FTC recently released a report that recommends\u00a0the following six best practices for managing Internet of Things data, recommendations that can really be applied to any type of data collection: Security by Design. \u00a0Security should be an integral part of<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/internet-of-things-iot-and-security-should-the-ftc-police-data-security\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41,18,31],"tags":[],"class_list":["post-5253","post","type-post","status-publish","format-standard","hentry","category-data-management","category-internet-of-things-iot","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=5253"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5253\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=5253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=5253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=5253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}