--- title: IoT Could Be Our Downfall description: IoT Could Be Our Downfall --- [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/head-logo-2.svg "TowerWall")](https://towerwall.com/) [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/towerwall-logo-white-test.svg "TowerWall")](https://towerwall.com/) - [Our Partners](https://towerwall.com/how-we-protect-you/our-technology-partners/) - Our Solutions - - Our Cybersecurity Solutions - We operationalize infosec, building security solutions that safeguard your most critical assets. - - [Solutions Overview](https://towerwall.com/cybersecurity-solutions/) - [Risk Assessments & Security Reviews](https://towerwall.com/cybersecurity-solutions/risk-assessments-security-reviews/) - [Program & Policy Development](https://towerwall.com/cybersecurity-solutions/program-policy-development/) - [Incident Response & Remediation](https://towerwall.com/cybersecurity-solutions/incident-response-remediation/) - [Managed Detection & Response](https://towerwall.com/cybersecurity-solutions/managed-detection-response/) - - [Compliance & Privacy](https://towerwall.com/cybersecurity-solutions/compliance-privacy/) - [Comprehensive Security Training](https://towerwall.com/cybersecurity-solutions/comprehensive-security-training/) - [Vulnerability Protection](https://towerwall.com/cybersecurity-solutions/vulnerability-protection/) - [Penetration Testing](https://towerwall.com/cybersecurity-solutions/penetration-testing/) - Virtual Security Officers - - Virtual Security Officer - Leverage the experience and security acumen of Towerwall’s on-demand security experts. - - [Virtual Chief Information Security Officer (VCISO)](https://towerwall.com/virtual-security-officers/virtual-chief-information-security-officer-vciso/) - [Virtual Data Protection Officer (vDPO)](https://towerwall.com/virtual-security-officers/virtual-data-protection-officer-vdpo/) - [Virtual Chief Privacy Officer (vCPO)](https://towerwall.com/virtual-security-officers/virtual-chief-privacy-officer-vcpo/) - We Advise - - We Advise - One-size security solutions only lead to failure. - Industries - [Higher Education](https://towerwall.com/industries/higher-education/) - [Financial Services & Banking](https://towerwall.com/industries/financial-services-banking/) - [Healthcare](https://towerwall.com/industries/healthcare/) - [BioPharma & Bio-Therapeutics](https://towerwall.com/industries/biopharma-bio-therapeutics/) - [Retail](https://towerwall.com/industries/retail/) - [Government](https://towerwall.com/industries/government/) - [Catholic Diocese](https://towerwall.com/industries/catholic-diocese-cybersecurity/) - [Cannabis](https://towerwall.com/industries/cannabis/) - [Small Business](https://towerwall.com/industries/small-business/) - [Enterprise](https://towerwall.com/industries/enterprise/) - Trends & Threats - [Remote Workforce](https://towerwall.com/trends-threats/remote-workforce/) - [Vendor Questionnaire](https://towerwall.com/trends-threats/vendor-questionnaire/) - [HIPAA](https://towerwall.com/trends-threats/hipaa/) - [Ransomware](https://towerwall.com/trends-threats/ransomware/) - [GDPR](https://towerwall.com/trends-threats/gdpr/) - [Cloud Security](https://towerwall.com/trends-threats/cloud-security/) - [Phishing](https://towerwall.com/trends-threats/phishing/) - [Cybersecurity Insurance](https://towerwall.com/trends-threats/cybersecurity-insurance/) - [Resources](https://towerwall.com/resources/) - - Resources - Our latest insights, events, and tools to keep you safe. - - [Insights](https://towerwall.com/resources/?resources_category=MTU%3D&focusarea=0&industries=0&search=) - [Webinars](https://towerwall.com/resources/?resources_category=MTg%3D&focusarea=0&industries=0&search=) - [Whitepapers](https://towerwall.com/resources/?resources_category=MTY%3D&focusarea=0&industries=0&search=) - [View All](https://towerwall.com/resources/) - [Company](https://towerwall.com/company/) - - Our Company - We are the industry’s leading cybersecurity preparedness partner. - - [Who We Are](https://towerwall.com/company/) - [Our Team](https://towerwall.com/company/our-team/) - [Our Approach](https://towerwall.com/our-approach/) - [Our Values](https://towerwall.com/company/our-values/) - - [Awards & Recognition](https://towerwall.com/company/awards-recognition/) - [Certifications & Affiliations](https://towerwall.com/company/certifications-affiliations/) - [Community Involvement](https://towerwall.com/company/community-involvement/) - [Careers](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) Topics IoT security, Gartner, Department of Consumer Affairs, Phishing, malware, ransomware, Internet of Things, cybercriminals, cannabis, Enterprise, Data Breach # IoT Could Be Our Downfall [By Michelle Drolet](https://blog.towerwall.com/author/towerwall2020) [Read More](https://blog.towerwall.com/author/towerwall2020) 3 Minute Read January 03, 2017 ## We need to secure the internet of things. The internet of things (IoT) is all about connecting devices to the internet so that they can talk to each other and to us, to make life more convenient. That might mean turning on the lights when we get up, or allowing us to use our phones to see who’s at the front door, even when we're at the office. The potential applications are endless. There are already more than 6 billion connected "things," and that's set to rise to more than 20 billion by 2020, [according to Gartner](http://www.gartner.com/newsroom/id/3165317). The enthusiasm for all things IoT has blinded us to the potential risks. Too many companies, keen to gain a foothold in the market have rushed out products that lack basic security protocols. ### Hacking the IoT Every device that's connected to the internet is another potential point of entry for a hacker. As we bring more and more of these devices into our homes and businesses, we need to be sure that they’re secure. There have been several [reports](http://www.nbcnews.com/tech/security/man-hacks-monitor-screams-baby-girl-n91546) of mysterious strangers hacking into baby monitors to talk to children or even watch them. The New York Department of Consumer Affairs issued a [warning](http://www1.nyc.gov/site/dca/media/pr012716.page) about it. Because countless IoT devices lack any built-in security, they are low-hanging fruit for cybercriminals. We've already seen IoT devices used to create botnets capable of [taking whole countries offline](http://www.telegraph.co.uk/technology/2016/11/04/unprecedented-cyber-attack-takes-liberias-entire-internet-down/) through DDoS attacks. The compromise of domain lookup service Dyn [took down major sites](http://www.networkworld.com/article/3134057/security/how-the-dyn-ddos-attack-unfolded.html) like Amazon on the East Coast just a few months ago. Dyn resolved the issue quickly and said the attacks were "well planned and executed, coming from tens of millions of IP addresses at the same time." Devices like IP cameras often lack built-in security, and they are always on and always connected to the network. Attackers can potentially gain access through web pages and cloud-based portals. IoT devices can also offer easy access to networks, serving as gateways to enable attackers to steal data or deliver malware. More than 25% of identified attacks in enterprises will involve IoT by 2020, [according to Gartner](http://www.gartner.com/newsroom/id/3291817). Companies need to carefully assess how they are going to use IoT to deliver business goals, but security must be part of that assessment. Without understanding and analyzing the risks, we’re opening ourselves up to serious exposure. The average cost of a data breach stands at $4 million now, [according to the Ponemon Institute](http://www-03.ibm.com/security/data-breach/). The potential damage to reputation (and the fines that could be levied for failure to comply with regulations surrounding personal data, on top of the cleanup cost) could be enough to sink a company. ### Worst-case scenario We are joining together devices and systems in a way that we've never done before, and we don't fully understand the potential dangers. The ramifications of a major attack could be devastating. For example, cybercriminals -- or even cyberterrorists -- might hack into car systems and simultaneously interfere with traffic light signals to cause crashes. They could disrupt ventilation systems, meltdown data centers by turning off cooling fans, or trigger widespread false alarms from multiple security systems. By making things like the power grid, water systems, hospitals, elevators, and many other devices and systems accessible online, we're enabling hackers to exert potentially catastrophic control over the physical world. They could wreak untold havoc if we don't ensure that security is given the proper consideration. ### What can we do? Manufacturers must start designing security into IoT devices from the beginning -- it can't be an afterthought. We need security standards at the manufacturing level. As business partners and consumers, that's something we need to demand. It's vital to [secure those IoT devices](http://www.networkworld.com/article/3085607/internet-of-things/8-tips-to-secure-those-iot-devices.html). Any enterprise employing IoT should have a clear implementation policy for a secure framework. Instead of going ahead and connecting a lot of devices, stop to assess the benefit. Do they need to be connected? If they do, then make sure that unique usernames and passwords are set. Create a separate network to isolate the risk. Potential vulnerabilities need to be identified and mitigation plans drawn up. Systems must be regularly reviewed, so they can be patched and updated as necessary. When IT professionals were asked about the successful implementation of IoT solutions, security ranked as the most important (76%) *and* the most challenging (58%) element, [per Forrester Research](http://www.cisco.com/c/dam/en_us/solutions/trends/iot/vital-element.pdf). Clearly, we can't afford to ignore IoT security any longer. We must develop new strategies and standards to ensure that the worst never happens. [*This article was originally posted in NetworkWorld. >*](http://www.networkworld.com/article/3151912/internet-of-things/iot-could-be-our-downfall.html) [*Image credit Think Stock >*](http://www.networkworld.com/article/3151912/internet-of-things/iot-could-be-our-downfall.html) #### IoT Could Be Our Downfall Back to Top ## Related Insights ### [Are Mobile Apps Putting Your Data at Risk?](https://blog.towerwall.com/mobile-apps-putting-data-risk-2) IoT security, Gartner, Department of Consumer Affairs, Phishing, malware, ransomware, Internet of Things, cybercriminals, cannabis, Enterprise, Data Breach ### [The 7 Deadly Sins of Endpoint Detection & Response](https://blog.towerwall.com/the-7-deadly-sins-of-endpoint-detection-response) IoT security, Gartner, Department of Consumer Affairs, Phishing, malware, ransomware, Internet of Things, cybercriminals, cannabis, Enterprise, Data Breach [View All Insights](https://blog.towerwall.com) × ## Talk with us now about: #### Your security needs. - ![Phone](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/phone-icon.svg "Phone") [Call 774.204.0700](tel:774.204.0700) - ![Mail](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/mail-icon.svg "Mail") [Email Us](mailto:info@towerwall.com) ### The front line of cybersecurity.™ For over 23 years, Towerwall, a woman-owned business, has helped scores of companies safeguard their data and leverage their investment in IT with advanced information security technology solutions and services. Our experience in all facets of information security coupled with serving in the CIO/CISO/ISO roles provides a unique first-hand understanding of the security challenges organizations face daily. ### Connect - - - - - [Career Opportunities](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) © Towerwall, Inc. and its licensees. All rights reserved [Privacy Policy](http://towerwall.com/privacy-policy/) Sitemap [Created by Howbridge](https://meethowbridge.com/) [![Towerwall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/footer-logo.svg "Towerwall")](https://towerwall.com/)