1. 5 th ITU Green Standards Week Nassau, The Bahamas 14-18 December 2015 Taming The IoT Security & Privacy Beast Craig Spiezle, Executive Director, Online Trust Alliance craigs@otalliance.org #otalliance craigs@otalliance.org

2. Mobile app Fitness Wearables Service/Data Providers IoT Data Processing IoT Provider Website Connected Home Entertainment Devices Challenges - IoT Ecosystem Highly personal, dynamic, persistent collection and transfer of data. A combination of devices, apps, platforms and cloud services. Multiple data flows, touch points and disclosures. Lack of defined standards. Non-traditional vendors 3 sides of the same coin – Privacy, Security & Sustainability

3. IoT Working Group Goals 1.Provide guidance to help reduce vulnerabilities and adopt responsible privacy and data practices. 2.Drive the adoption of best practices; embracing as a voluntary, yet enforceable, code of conduct. 3.Provide recognition to companies, products and retailers who embrace the code of conduct. 4.Think globally; where possible, apply international standards and practices. 5.Encourage collaboration, sharing of best practices and threat intelligence. 6.Evaluate gating issues and considerations which may lead to the development – Voluntary, yet enforceable code of conduct – Seal or certification program.

4. Global Collaboration

5. Ambient Data – Smart City Growing number of devices & sensors Use & sharing with unknown/undisclosed third parties May be “benign” today, but harmful tomorrow

6. Trust Framework – Pre Release

10. Partnership with the National Association of Realtors Security, Privacy & Personal Safety Steps to “re-provision” your home Prior to occupancy, rental & at “closing” Prescriptive advice Released Oct 21st https://otalliance.org/SmartHome Education - The Connected Home

11. Connected devices within the connected city & home. Targeting buyers / recipients of connected devices during 2015 Holiday Prior to purchase & set up. Help proactively raise awareness of key Security & Privacy considerations. Released December 8th Education – Connected Devices

12. Release January / February 2015 Develop an implementation guide Drive a proof of concept “pilot” Expand collaboration with other organizations. Secure funding & grants for pilot projects Develop incentives, recognize early adopters. Develop criteria as the basis for a certification program. What’s Next?

13. More Information IoT Initiative https://otalliance/org/IoThttps://otalliance/org/IoT Smart Home https://otalliance.org/SmartHomehttps://otalliance.org/SmartHome Craig Spiezle craigs@otalliance.org +1-425-455-7400