It’s interesting that with every area of business and industry, there seems to be another security framework released. With these frameworks will come new certifications that organizations will need to obtain (usually at a high price) in order to do business with some third parties.

While it’s always good to assess your cyber security, it would be nice to see at most two or three frameworks and addendums which address either specific technologies or business sectors. Looking at the different frameworks and questionnaires, you get the feeling of deja vu  all over again.

At the end of September, the Industrial Internet Consortium (IIC) has released the initial version of its Security Framework for industrial Internet of Things (IIoT) development. I believe that this document will prove to be very important as we go forward but I still wish we could standardize on just a few.