While internet of things devices are often small embedded systems, IoT and the cloud are heavily co-mingled, as IoT devices make use of cloud services.
“Whether we are talking about voice-controlled assistants or talking Barbies, these all interact with services in the cloud,” Brian Russell, chairman of the IoT Working Group at CSA and chief engineer, Cyber Security Solutions, Leidos, told eWEEK. “CSA has well-defined cloud security guidelines, with the Cloud Controls Matrix (CCM) and other guidance, but we realized that if the IoT products themselves are not secure, then there will continue to be compromises.”