4.3 Key Findings

after a security researcher showed that the pump could be accessed remotely over WiFi and allowed an attacker to change dosage settings or use it as a gateway to attack hospital networks97 .

While there are numerous pilots and also several American and European initiatives to address specific domains such as automotive and healthcare as discussed above, global IoT security initiatives and standards are lacking in these domains.

4.3 KEY FINDINGS – Most initiatives have a generic focus, and applicationspecific initiatives (e.g. for automotive or healthcare) are largely country- or region-specific. – Most Standards Development Organisations (SDOs) have initiated work on IoT Security standards. – Most initiatives are industry-driven, and we observe a lack of government involvement outside Europe. – National or continental initiatives are centred on the

Americas or Europe; a global approach is lacking. – Substantial initiatives with a broad security focus include the Industrial IoT Consortium and the IoT Security

Foundation.

97 https://www.reuters.com/article/ us-hospira-fda-cybersecurity-idUSKCN0Q52GJ20150731 35