E-Business
IoT Security Expands Over Half of Global Enterprise IT Security Programs by 2020
The power of objects in the Internet of Things (IoT) to change the state of environments — in addition to generating information — will cause chief information security officers (CISOs) to redefine the scope of their security efforts beyond present responsibilities, according to Gartner, Inc.
Gartner predicts that IoT security requirements will reshape and expand over half of all global enterprise IT security programs by 2020 due to changes in supported platform and service scale, diversity and function.
“The IoT is redrawing the lines of IT responsibilities for the enterprise,” said Earl Perkins, research vice president at Gartner. “IoT objects possess the ability to change the state of the environment around them, or even their own state; for example, by raising the temperature of a room automatically once a sensor has determined it is too cold or by adjusting the flow of fluids to a patient in a hospital bed based on information about the patient’s medical records. Securing the IoT expands the responsibility of the traditional IT security practice with every new identifying, sensing and communicating device that is added for each new business use case.”
Traditional “information” technology is now being supplemented by purpose-built, industry-specific technologies that are tailored by where and how that technology is used and what function it delivers. Information remains a key deliverable and is the fuel for IoT devices.
The device’s ability to identify itself (such as RFID tags that identify cargo), sense the environment (such as temperature and pressure sensors) or communicate (such as devices in ocean buoys that transmit environmental changes to the areas around them) requires information to be generated, communicated and/or used.
Although traditional IT infrastructure is capable of many of these tasks, functions that are delivered as purpose-built platforms using embedded technology, sensors and machine-to-machine (M2M) communications for specific business use cases signal a change in the traditional concept of IT and the concept of securing IT.
“This is an inflection point for security. CISOs will need to deconstruct current principles of IT security in the enterprise by re-evaluating practices and processes in light of the IoT impact,” said Mr. Perkins. “Real-time, event-driven applications and nonstandard protocols will require changes to application testing, vulnerability, identity and access management (IAM) — the list goes on.
Handling network scale, data transfer methods and memory usage differences will also require changes. Governance, management and operations of security functions will need to change to accommodate expanded responsibilities, similar to the ways that bring your own device (BYOD), mobile and cloud computing delivery have required changes — but on a much larger scale and in greater breadth.”
Although the business use cases being identified daily are indeed innovative and new, the technologies and services that deliver them are seldom new as well — they are also seldom uniform in architecture and design. Each use case risk profile has specific requirements that may result in the use of old platform and service architecture with a new technology “overlay” to improve performance and control.
“This represents an interesting challenge for CISOs when delivering secure services for the IoT,” said Mr. Perkins. “In some cases, it may be a ‘past is future’ exercise in evaluating mainframe, client/server, Web, cloud and mobile security options as part of an overall IoT business use case.
Even out-of-maintenance systems such as Windows XP may still play a critical role for some industry infrastructure as part of an IoT security system. Security planners should not throw away their old security technology manuals just yet.”
CISOs should not automatically assume that existing security technologies and services must be replaced; instead, they should evaluate the potential of integrating new security solutions with old. Many traditional security product and service providers are already expanding their existing portfolios to incorporate basic support for embedded systems and M2M communications, including support for communications protocols, application security and IAM requirements that are specific to the IoT.
“At this time, there is no ‘guide to securing IoT’ available that provides CISOs with a framework for incorporating IoT principles across all industries and use cases,” said Mr. Perkins. “Another unique characteristic of the IoT is the sheer number of possible combinations of device technologies and services that can be applied to those use cases. What constitutes an IoT object is still up for argument, so securing the IoT is a ‘moving target.’ However, it is possible for CISOs to establish an interim planning strategy, one that takes advantage of the ‘bottom-up’ approach available today for securing the IoT.”
CISOs should resist the temptation to overthink security planning while patterns and solutions are still emerging. They should start small and develop initial security projects based on specific IoT interactions within specific business use cases. CISOs can build on these use case experiences to develop common security deployment scenarios, core architectural foundations and competency centers for the future.
“The requirements for securing the IoT will be complex, forcing CISOs to use a blend of approaches from mobile and cloud architectures, combined with industrial control, automation and physical security,” said Mr. Perkins.
“Fortunately, many of the security requirements for the IoT will look familiar to the CISO. The technologies and services that have been used for decades to secure different eras of computing are still applicable in most cases.
National Identity Management Commission (NIMC) of Nigeria has launched a new digital identity verification tool called the NIN Authentication (NINAuth) application.
The initiative, which forms part of President Bola Tinubu’s Renewed Hope Agenda, aims to strengthen the country’s national digital identity management framework.
The launch builds upon Nigeria’s comprehensive unified digital identity system that has been transforming access to financial services and government programs.
The NINAuth application introduces several key features focused on data security and privacy.
The platform requires explicit user consent before sharing identity information for Know Your Customer (KYC) processes, giving individuals greater control over their personal data.
The system provides seamless access to various government services, including SIM card registration, immigration applications, passport processing, tax filings, and financial transactions.
The development follows significant investment in Nigeria’s digital identity infrastructure, including a $45.5 million support from the World Bank as part of the Digital Identification for Development (ID4D) project.
As the official service for integration with NIMC’s backend infrastructure, NINAuth enables secure verification processes across ministries, departments, and agencies (MDAs).
The application is available for download on both the Google Play Store and Apple iOS App Store for users of the National Identification Number (NIN).
The rollout represents a significant milestone in Nigeria’s ongoing efforts to digitize government services and strengthen identity verification processes.
“NINAuth is a cutting-edge suite of services including web, API, and mobile verification designed to enhance data security, protect privacy, and simplify access to government services,” said Dr. Kayode Adegoke, Head of Corporate Communications at NIMC.
“The platform introduces a robust layer of protection, empowering individuals with greater control over their personal information.”
The implementation supports the objectives of the recently established Nigeria Digital Identification for Development Project Ecosystem Steering Committee, which oversees the country’s digital identity initiatives.
President Bola Ahmed Tinubu has approved the launch of the NINAuth app and directed its use for verification and authentication across all MDAs.
The application provides a secure single sign-on solution for accessing government services and social protection programs while maintaining strict data privacy controls.
The centralized approach to digital identity management represents a significant step forward in Nigeria’s digital transformation journey and its commitment to modernizing government services.
Nigerian Copyright Commission (NCC) has set in motion a machinery to checkmate the booming copyright piracy market in the country.
Copyright piracy is said to cost Nigeria an annual loss estimated at billions of naira.
Despite the absence of a coordinated or official statistics to gauge the quantum of loss, John Asein, director general, NCC, said as far back as 2019, Nigeria lost N918 trillion ($3 billion) annually to digital piracy.
The financial damages severely impact local businesses and innovation efforts.
The commission, in collaboration with the World Intellectual Property Organisation (WIPO), has started a project to develop strategies and tools to address the menace.
Speaking at a stakeholders’ meeting on the WIPO project to address online copyright piracy in Nigeria, Asein said digital technologies have unlocked tremendous opportunities for the creative and innovation sectors.
The NCC boss said technology also poses serious challenges, including online piracy, which he said is growing rapidly.
He said: “Pirate sites continue to emerge rapidly, with statistics indicating a 6.7 per cent increase in user visits. A significant percentage of these users are students aged between 18 and 24, with social media and messaging platforms becoming major gateways for accessing pirated content.”
He added: “No industry is immune. The most affected sectors include television (43.6 per cent), publishing (27.5 per cent), film (12.9 per cent), music (7.0 per cent), and software (6.2 per cent).
“Far beyond mere statistics, the victims are no longer only foreign right owners. Many Nigerians in these sectors have also been bruised and their creative enterprises ruined.”
Nigerian Postal Service (NIPOST) has signed an international mail partnership with KLM Royal Dutch Airlines for improved delivery access to over 200 countries without middlemen.
Tolani Odeyemi, postmaster-general and chief executive officer of NIPOST, described the deal as a “major milestone” for the country’s logistics and postal sector.
In a statement on X on Monday, Odeyemi explained that the new agreement marks NIPOST’s first direct international airline partnership for several years.
“For a long time, NIPOST operated without any direct partnerships with international airlines, relying heavily on multiple third-party handlers,” the Postmaster-General stated. This often resulted in delays, higher costs, and uncertainty around the delivery of packages.”
She explained that under the new arrangement, KLM will directly handle all outbound international mail from Nigeria, eliminating the need for intermediaries.
“This translates to faster and more reliable delivery, reduced risk of loss or damage, lower handling charges, and access to over 200 countries through KLM’s global network,” the Postmaster-General stressed.
According to Odeyemi, NIPOST’s breakthrough came after it began settling long-standing debts owed to international carriers, a step she said was key to “rebuilding global trust” in Nigeria’s postal system.
She revealed that talks were also ongoing with Ethiopian Airlines to bolster regional and continental logistics, particularly on African and Eastern routes.
“Our goal is clear and unwavering: to connect Nigeria regionally and globally, efficiently, securely, and affordably,” Odeyemi asserted.
The NIPOST CEO described the development as a significant win for Nigerian businesses and small and medium-scale enterprises that rely on international shipping, stating, “You now benefit from quicker, more affordable international shipping, greater peace of mind with improved reliability, and new potential to reach and grow in global markets.”
Odeyemi commended the teams behind the scenes and pledged continued improvements in service delivery, adding that the deal signals a turning point for the agency.
Nigerians May Pay More for Calls, Data as Senate Okays 5 Percent Excise Duty
W’Bank Says Cash Transfer Missed Millions of Needy Nigerians
EFCC Tells Nigerians to Shun Ponzi Schemes Like CBEX, Others
NIMC Launches NINAuth Digital Identity Verification App for Govt Services
NCC to Checkmate $3Bn Digital Piracy Market
E-Business3 days agoNIN: FG Increases DoB Update Fee by 75Percent to N28,574
Broadcasting3 days agoAfreximbank Unveils Third Edition of Short Film Competition ‘Creative Africa Nexus’
General News3 days agoNIMASA Embraces Technology to Strengthen Regulatory Mandate
E-Business3 days ago10 Percent of Nigerians Affected by Data Breaches since 2004
Telecom3 days agoMTN Commits $10Bn to Nigeria’s Digital Infrastructure
E-Financial3 days agoSEC Intensifies Fight Against Ponzi Schemes With Market
News3 days agoSERAP Challenges CBN to Publish Local Government Allocations
Telecom2 days agoNigeria to Receive $3Bn Telecoms Infrastructure in June – Minister