Training system stakeholders

In 2015, OpenDNS released a report on the IoT in the enterprise. This report provided an early glimpse into challenges that security practitioners will soon face. The report identified that employees had been connecting their own IoT devices into their employer networks, and found that devices such as smart televisions were reaching out through enterprise firewalls to manufacturer IP addresses across a number of ports. This research demonstrated the need to train employees on what is appropriate to connect to the network and to train security administrators to be on the lookout for inappropriately connected consumer IoT devices.

There are not a lot of ready-made training options available for your stakeholders. Even so, it is possible to create your own in-house training material and provide them with it on a regular basis. This section describes content that should be included in security awareness training for employees and in training for security and system...