T alking points about Data Governance in Internet of Things Emanuele De Lucia – CISSP, MCSE, L|PT, E|CSA, C|HFI, CIFI, CCNA

Who Am I ? Emanuele De Lucia – CISSP, MCSE, L|PT, E|CSA, C|HFI, CIFI, CCNA * Security Enthusiast (this would not be already enough ?) * Security professional with 6+ years of experience * Security researcher and malware analyst * Technical reviewer for several security magazines * ISC2, IISFA and ISACA member * A guy with a great curiosity…

IoT Explosion Emanuele De Lucia – CISSP, MCSE, L|PT, E|CSA, C|HFI, CIFI, CCNA The marketplace is currently seeing a growing adoption of IoT within the consumer sector. According to a report by Cisco and DHL, there will be 50 billion devices by 2020…

IoT Explosion Emanuele De Lucia – CISSP, MCSE, L|PT, E|CSA, C|HFI, CIFI, CCNA Industries such as manufacturing, energy, transportation and retail are already adopting IoTs. Municipalities around the world are also adopting the IoT (yes, Italy as well), working towards becoming smart cities that rely on data collected from thousands of diverse sensors spread across a geographic region. As each industry begins to implement capabilities of the IoT to meet unique needs and requirements however, it will be important to understand that each unique implementation should be evaluated for weaknesses in security and privacy while collecting personal data…

Who “owns” the data ? Emanuele De Lucia – CISSP, MCSE, L|PT, E|CSA, C|HFI, CIFI, CCNA This is the first big privacy (and security) consideration ! From here: - Are we always able to answer correctly to the question in title ?! …and even if it were… - How my data is accessed ? - What security measures are in place and who administers those ? - Are my data shared with third parties ? - Is there someone going to study or use the emerging patterns in my data ?

How these data are used today ? Emanuele De Lucia – CISSP, MCSE, L|PT, E|CSA, C|HFI, CIFI, CCNA Usually the utilization of personal / behavioral data has not a malicious intent… Most of these data concerns our s, our surfing behavior and our buying preferences. The reason to utilize these collected data has almost always one scope only: money, or a little better, to make more money but… …think ! What about tomorrow ? What happens when there will be 50 billion connected devices ?

How these data will be used tomorrow ? Emanuele De Lucia – CISSP, MCSE, L|PT, E|CSA, C|HFI, CIFI, CCNA We can expect the majority of these devices will be sensors in cars, clothes, cardiac monitors and more… Imagine the information about us that each sensor can collect ! Imagine now the information that the set of all these sensors around us could collect and disclose… Again, an old but still new question there will be: how our data will be used and managed in future ?

Conclusion! Emanuele De Lucia – CISSP, MCSE, L|PT, E|CSA, C|HFI, CIFI, CCNA IoT implementations will continue to grow exponentially… Regarding the data governance, there are initiatives in Europe that seem taking more into account privacy and security issues… Data governance is extremely important because it implies security, economic, ethical and privacy considerations… We can simply conclude our discussion by saying: it will not be easy, man! Thank you for attendance