Machines and sensors.
WHAT THIS COVERS
Equipment with network connections: machinery, sensors, displays, access control, environmental monitoring.
WHY IT NEEDS THOUGHT
Such equipment is frequently weak, rarely updated, and long-lived.
WHAT TO DO
Place it on a separate network segment Change default credentials Apply firmware updates where available Restrict what it can reach
WHAT TO ASK BEFORE BUYING
Whether the manufacturer provides security updates, and for how long Whether it requires internet access to function What happens if the manufacturer's service ends
THAT LAST QUESTION
Equipment dependent on a cloud service becomes useless if the service ends.
WHAT TO AVOID
Connecting equipment to the internet because it can be Equipment requiring inbound access from outside
WHAT TO MONITOR
What such equipment communicates with.
WHAT TO PLAN FOR
Replacement, since updates typically stop long before the equipment fails.
WHAT TO DOCUMENT
What is connected, where, and how it is configured.
