Risk underestimated due to smartness

They are used everywhere, but the associated security risk is underestimated: we are talking about smart devices. 42 percent of 260 companies surveyed for the IoT Security Report 2021 do not have any compliance rules for their IoT devices such as routers, WiFi access points, VoIP phones, network cameras or IoT devices in production.

In April 2021, the survey was conducted at decision-maker level among German companies of various sizes. When it comes to device security, 22 percent rely on contractual regulations from manufacturers. Only eleven percent conduct a threat analysis, while 28 percent rely on penetration testing.

Intrusion detection takes place in only 37 percent of the companies surveyed. Also critical is the vacuum that exists around the issue of responsibility for IoT security. At 15 percent of the 260 companies, the burden lies with the CTO, at 17 percent with the CIO. 17 percent have responsibility in purchasing, and another 21 percent rely on external consultants.

Hackers have it so easy - at least that's what the 260 company representatives surveyed say. 85 percent confirm that cybercriminals have already focused on IoT devices. The respondents see servers, PCs and Industry 4.0 equipment as particularly at risk. Medical technology with a network connection, on the other hand, is considered to be at risk by only 28 percent, and IP telephones by only 14 percent. This is a gross misjudgment that may have been valid ten years ago.