%PDF-1.4 % 20 0 obj <> endobj 34 0 obj <> endobj 39 0 obj <> endobj 44 0 obj <> endobj 49 0 obj <> endobj 70 0 obj <> endobj 76 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 490.9954 20.9379 Tm 0 0 0 1 k 0 Tc 0 Tw (ISACA )Tj ET EMC /P <>BDC BT 7 0 0 7 512.4738 20.9379 Tm (JOURNAL)Tj ET EMC /P <>BDC /GS1 gs BT 7 0 0 7 543.321 20.9379 Tm 0 .65 0 0 k [( V)6.4(OL 3)]TJ ET EMC /Artifact <>BDC 0 0 0 1 k /GS2 gs 572.364 0 .51599 31.289 re f EMC /P <>BDC /GS1 gs BT 7 0 0 7 587.3827 20.9379 Tm 0 .65 0 0 k (1)Tj ET EMC /P <>BDC /GS2 gs BT 7 0 0 7 36.946 20.9698 Tm 0 0 0 1 k [( 2020 ISACA. All rights reser)-8.8(ved. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 144.5779 20.9698 Tm [(www)60.6(.isaca.org)]TJ ET EMC /Artifact <>BDC .29 1 .45 .09 k /GS1 gs 254.728 54.377 348.272 99.952 re f EMC /Figure <>BDC Q q 1 i 253.5 336.756 349.502 -173.389 re W* n 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n /GS1 gs q 352.32 0 0 176.4 252.106 161.867 cm /Im2 Do Q EMC /P <>BDC Q q 1 i 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n /GS2 gs BT /F1 1 Tf 9 0 0 9 38.364 602.9052 Tm 0 0 0 1 k -.005 Tc 0 Tw [(The Internet of )19.5(Things \(IoT\) has intr)9.8(oduced new)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.9486 602.9052 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 590.9052 Tm -.005 Tc [(security risk fact)9.8(ors that are unprecedented in)]TJ ET EMC /P <>BDC BT 9 0 0 9 219.4139 590.9052 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 578.9052 Tm -.005 Tc (scope and scale. Although the recommendations)Tj ET EMC /P <>BDC BT 9 0 0 9 232.0063 578.9052 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 566.9052 Tm -.005 Tc [(presented here are intended for IoT)19.5( manufacturers,)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.1818 566.9052 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 554.9052 Tm -.005 Tc [(many of them are equally applicable t)9.8(o)0( other)]TJ ET EMC /P <>BDC BT 9 0 0 9 213.6734 554.9052 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 542.9052 Tm -.005 Tc [(stakeholders in the IoT)19.5( community, such as ser)-8.8(vice)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.9684 542.9052 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 530.9052 Tm -.005 Tc [(pr)9.8(o)7.3(viders and software de)6.4(velopers. F)12.7(r)9.8(om the)]TJ ET EMC /P <>BDC BT 9 0 0 9 214.5709 530.9052 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 518.9052 Tm -.005 Tc [(perspective of manufacturers, securing IoT)19.5( )]TJ ET EMC /P <>BDC BT 9 0 0 9 209.8205 518.9052 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 506.9052 Tm -.005 Tc [(requires answers t)9.8(o)0( the following questions:)]TJ ET EMC /P <>BDC BT 9 0 0 9 212.6714 506.9052 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 49.38 488.9292 Tm -.02 Tc [(T)48.4(o)0( what risk fact)9.8(ors are IoT)19.5( stakeholders exposed?)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 243.6722 488.9292 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F3 1 Tf 12 0 0 12 38.364 488.9292 Tm .73 .19 0 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 49.38 470.9532 Tm 0 0 0 1 k -.005 Tc [(Why and how are IoT)19.5( de)6.4(vices impacted?)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 207.7689 470.9532 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F3 1 Tf 12 0 0 12 38.364 470.9532 Tm .73 .19 0 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 49.38 452.9772 Tm 0 0 0 1 k -.005 Tc (What are the latest laws and guidelines that)Tj ET EMC /LBody <>BDC BT 9 0 0 9 221.4505 452.9772 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F3 1 Tf 12 0 0 12 38.364 452.9772 Tm .73 .19 0 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 49.38 440.9772 Tm 0 0 0 1 k -.005 Tc [(affect IoT)19.5( manufacturers?)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 152.1422 440.9772 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 49.38 423.0012 Tm -.005 Tc [(How can IoT)19.5( manufacturers secure their de)6.4(vices)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 240.4196 423.0012 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F3 1 Tf 12 0 0 12 38.364 423.0012 Tm .73 .19 0 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 49.38 411.0012 Tm 0 0 0 1 k -.005 Tc [(and cust)9.8(omers data?)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 134.3671 411.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 207.0012 Tm -.005 Tc [(According t)9.8(o)0( two recent sur)-8.8(veys, t)9.8(op executives)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.4979 207.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 195.0012 Tm -.005 Tc (consider building trust and ensuring cybersecurity)Tj ET EMC /P <>BDC BT 9 0 0 9 234.818 195.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 183.0012 Tm -.005 Tc [(in IoT)19.5( deployment the most essential)]TJ ET EMC /P <>BDC BT 9 0 0 9 184.0932 183.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 171.0012 Tm -.005 Tc [(consider)19.5(ations.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 99.1644 174.7761 Tm 0 Tc (1)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 102.1516 173.9712 Tm -.0083 Tc (, )Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 104.4585 174.7761 Tm 0 Tc (2)Tj ET EMC /P <>BDC BT 9 0 0 9 107.4458 171.0012 Tm -.005 Tc [( A signicant por)-24.4(tion of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 214.3093 171.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 159.0012 Tm -.005 Tc [(re)6.4(venue derived fr)9.8(om an IoT)113.3(-driven economy is)]TJ ET EMC /P <>BDC BT 9 0 0 9 222.0219 159.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 147.0012 Tm -.005 Tc [(pr)9.8(oduced thr)9.8(ough monetization of the data)]TJ ET EMC /P <>BDC BT 9 0 0 9 207.533 147.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 135.0012 Tm -.005 Tc [(gener)19.5(ated fr)9.8(om the IoT)19.5( ecosystem.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 176.5511 138.7761 Tm 0 Tc (3)Tj ET EMC /P <>BDC BT 9 0 0 9 179.5383 135.0012 Tm -.005 Tc ( Once data are)Tj ET EMC /P <>BDC BT 9 0 0 9 236.7405 135.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 123.0012 Tm -.005 Tc [(par)-24.4(t of the equation, security and priv)7.3(acy natur)19.5(ally)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.46 123.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 111.0012 Tm -.005 Tc [(become impor)-24.4(tant consider)19.5(ations.)]TJ ET EMC /P <>BDC BT 9 0 0 9 174.4338 111.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS1 gs BT /F4 1 Tf 11 0 0 11 38.364 85.0012 Tm .29 1 .45 .09 k -.005 Tc [(The Current State of IoT)29.3( Security)]TJ ET EMC /P <>BDC BT 11 0 0 11 199.2295 85.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 38.364 67.0012 Tm 0 0 0 1 k -.005 Tc [(In the past, consumer gadgets or industrial de)6.4(vices)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.2731 67.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 38.364 55.0012 Tm -.005 Tc [(were designed primarily t)9.8(o)0( pr)9.8(o)7.3(vide the necessary)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.9836 55.0012 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 602.9056 Tm -.005 Tc [(functionality and per)-7.3(formance. )19.5(They were pr)9.8(oduced)]TJ ET EMC /P <>BDC BT 9 0 0 9 460.2668 602.9056 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 590.9056 Tm -.005 Tc [(at the lowest cost and were br)9.8(ought t)9.8(o)0( market as)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.0593 590.9056 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 578.9056 Tm -.005 Tc [(quickly as possible. )19.5(These de)6.4(vices or software)]TJ ET EMC /P <>BDC BT 9 0 0 9 439.9583 578.9056 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 566.9056 Tm -.005 Tc [(often lacked the basic mechanisms t)9.8(o)0( pr)9.8(otect)]TJ ET EMC /P <>BDC BT 9 0 0 9 437.5478 566.9056 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 554.9056 Tm -.005 Tc (themselves against misuse or hacking.)Tj ET EMC /P <>BDC BT 9 0 0 9 410.5507 554.9056 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 530.9056 Tm -.02 Tc [(Recent IoT)113.3(-related security incidents r)19.5(ange fr)9.8(om the)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.9188 530.9056 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 518.9056 Tm -.02 Tc (massive, such as the Internet blackout caused by the)Tj ET EMC /P <>BDC BT 9 0 0 9 458.245 518.9056 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 506.9057 Tm -.02 Tc [(Mir)19.5(ai attack in 2016,)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 333.8339 510.6806 Tm 0 Tc (4)Tj ET EMC /P <>BDC BT 9 0 0 9 336.6862 506.9057 Tm -.02 Tc [( t)9.8(o)0( specic attacks, such as the)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.1492 506.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 494.9057 Tm -.02 Tc [(security compr)9.8(omise of a digital thermometer in a)]TJ ET EMC /P <>BDC BT 9 0 0 9 447.3547 494.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 482.9057 Tm -.02 Tc (sh tank.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 291.7848 486.6806 Tm 0 Tc (5)Tj ET EMC /P <>BDC BT 9 0 0 9 294.637 482.9057 Tm -.02 Tc [( )19.5(These kinds of attacks affect not just the)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.2774 482.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 470.9057 Tm -.02 Tc [(commer)9.3(cial sect)9.8(or but also household consumers, as)]TJ ET EMC /P <>BDC BT 9 0 0 9 461.3779 470.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 458.9057 Tm -.02 Tc [(e)6.4(videnced by the Jeep hack in 2015)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 393.6902 462.6806 Tm 0 Tc (6)Tj ET EMC /P <>BDC BT 9 0 0 9 396.5426 458.9057 Tm -.02 Tc ( and the hack of)Tj ET EMC /P <>BDC BT 9 0 0 9 457.5594 458.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 446.9057 Tm -.02 Tc [(Internet-connected smar)-24.4(t t)9.8(oys in 2017.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 404.5454 450.6806 Tm 0 Tc (7)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 407.3976 450.6806 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 422.9057 Tm -.005 Tc [(Security vulner)19.5(abilities in IoT)19.5( pr)9.8(oducts can expose)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.0685 422.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 410.9057 Tm -.005 Tc [(manufacturers t)9.8(o)0( serious cybersecurity risk,)]TJ ET EMC /P <>BDC BT 9 0 0 9 429.5366 410.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 398.9057 Tm -.005 Tc (potentially resulting in reputational damage and)Tj ET EMC /P <>BDC BT 9 0 0 9 444.7068 398.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 386.9057 Tm -.005 Tc [(hea)7.3(vy nes. Another issue that demands attention)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.6208 386.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 374.9057 Tm -.005 Tc [(is counter)-7.3(feiting. Counter)-7.3(feit pr)9.8(oducts pose an)]TJ ET EMC /P <>BDC BT 9 0 0 9 440.5638 374.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 362.9057 Tm -.005 Tc [(immediate and tangible threat t)9.8(o)0( manufacturers in)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.1164 362.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 256.864 350.9057 Tm -.005 Tc [(economic terms thr)9.8(ough the loss of re)6.4(venue. F)10.3(o)0(r)]TJ ET EMC /P <>BDC BT 9 0 0 9 448.6058 350.9057 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS1 gs BT /F5 1 Tf 30 0 0 30 36 660.6805 Tm 0 .65 0 0 k -.02 Tc [(Security for Internet of )19.5(Things)]TJ ET EMC /P <>BDC BT 30 0 0 30 406.1872 660.6805 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 30 0 0 30 36 626.6805 Tm -.02 Tc [(De)6.4(vice Manufacturers)]TJ ET EMC /P <>BDC BT /F4 1 Tf 11 0 0 11 268.1073 136.4189 Tm 0 0 0 0 k (Welland Chu,)Tj ET EMC /P <>BDC BT /F1 1 Tf 11 0 0 11 330.0551 136.4189 Tm ( Ph.D., CISA, CISM)Tj ET EMC /P <>BDC BT 11 0 0 11 414.7186 136.4189 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 268.1073 125.619 Tm [(Is the business de)6.4(velopment direct)9.8(or)60.1(, Asia and P)5.4(acic Region, at the cloud)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.7187 125.619 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 268.1073 114.8189 Tm [(pr)9.8(otection and licensing business unit of )19.5(Thales. He ser)-8.8(ves as the secretary)]TJ ET EMC /P <>BDC BT 9 0 0 9 568.913 114.8189 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 268.1073 104.019 Tm [(and vice president of cer)-24.4(tication at the ISACA)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 453.9257 106.989 Tm ()Tj ET EMC /P <>BDC BT 9 0 0 9 458.1708 104.019 Tm [( ChinaHong K)13.2(ong Chapter)60.1(.)]TJ ET EMC /P <>BDC BT 9 0 0 9 569.1987 104.019 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 268.1073 93.2189 Tm (During his 26 years in the security industry, Chu has led teams of security)Tj ET EMC /P <>BDC BT 9 0 0 9 559.0341 93.2189 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 268.1073 82.4188 Tm [(pr)9.8(ofessionals in assessing and implementing security solutions for clients)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.5824 82.4188 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 268.1073 71.619 Tm [(in the critical infr)19.5(astructure sect)9.8(or)60.1(. He can be reached at)]TJ ET EMC /P <>BDC BT 9 0 0 9 491.4901 71.619 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 268.1073 60.8189 Tm [(Welland.Chu@thalesgr)9.8(oup.com.)]TJ ET EMC /Artifact <>BDC 514.45 692.116 53.716 54.884 re f EMC /Figure <>BDC Q /GS1 gs BT /F6 1 Tf 9 0 0 9 514.4502 721.5889 Tm .24314 .96078 .39216 .12941 k .0249 Tc 0 Tw (FEATURE)Tj ET q 1 i 514.575 747 53.591 -54.759 re W n q 1 0 0 1 568.166 747 cm 0 0 m 0 -54.884 l -9.375 -54.884 l -9.375 -9.9448 l -49.977 -9.9448 l -49.977 0 l 0 0 l f Q EMC /Artifact <>BDC Q q 1 i 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n 0 .65 0 0 k 36 221.49 205.5 176.278 re f EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 40.8626 356.1241 Tm .73 .19 0 0 k 0 Tc ()Tj ET EMC /P <>BDC BT /F1 1 Tf 14 0 0 14 54.7698 376.1243 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [( SECURIT)-7.8(Y)]TJ ET EMC /P <>BDC BT 14 0 0 14 125.925 376.1243 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.1087 358.1243 Tm .0351 Tc -.0175 Tw [(VULNERABILITIES)17.5( IN)17.5( IO)13.2(T)]TJ ET EMC /P <>BDC BT 14 0 0 14 206.2512 358.1243 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.1087 340.1243 Tm .0351 Tc -.0175 Tw [(PRODUC)14.1(T)7.8(S)17.5( CAN)17.5( EXPOSE)]TJ ET EMC /P <>BDC BT 14 0 0 14 206.6408 340.1243 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.1087 322.1243 Tm .0351 Tc -.0371 Tw [(MANUF)83(AC)14.1(TURERS)17.5( T)13.6(O)]TJ ET EMC /P <>BDC BT 14 0 0 14 185.1966 322.1243 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.1087 304.1243 Tm .0351 Tc -.0175 Tw [(SERIOUS)17.5( CYBERSECURIT)-7.8(Y)]TJ ET EMC /P <>BDC BT 14 0 0 14 216.4368 304.1243 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.1087 286.1243 Tm .0351 Tc -.0175 Tw [(RISK)17.5(,)35.1( PO)13.2(TENTIALL)116.7(Y)]TJ ET EMC /P <>BDC BT 14 0 0 14 171.6682 286.1243 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.1087 268.1243 Tm .0351 Tc -.0175 Tw [(RESUL)134.2(TING)17.5( IN)]TJ ET EMC /P <>BDC BT 14 0 0 14 134.8224 268.1243 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.1087 250.1243 Tm .0351 Tc -.0175 Tw [(REPUT)38.5(A)63(TIONAL)17.5( DAMAGE)]TJ ET EMC /P <>BDC BT 14 0 0 14 209.3343 250.1243 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.1087 232.1243 Tm .0351 Tc -.0175 Tw [(AND)17.5( HEA)42.4(VY)17.5( FINES)17.5(.)35.1( )]TJ ET EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 171.217 212.1241 Tm .73 .19 0 0 k 0 Tc 0 Tw ()Tj ET EMC Q endstream endobj 77 0 obj <>/XObject<>/ExtGState<>>> endobj 107 0 obj <> endobj 109 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 39.4019 20.9698 Tm 0 0 0 1 k 0 Tc 0 Tw (ISACA )Tj ET EMC /P <>BDC BT 7 0 0 7 60.8804 20.9698 Tm (JOURNAL)Tj ET EMC /P <>BDC /GS1 gs BT 7 0 0 7 91.7275 20.9698 Tm 0 .65 0 0 k [( V)6.4(OL 3)]TJ ET EMC /Artifact <>BDC 0 0 0 1 k /GS2 gs 30.069 0 .51505 31.531 re f EMC /P <>BDC /GS1 gs BT 7 0 0 7 12.8637 20.9698 Tm 0 .65 0 0 k (2)Tj ET EMC /P <>BDC /GS2 gs BT 7 0 0 7 413.8918 20.9379 Tm 0 0 0 1 k [( 2020 ISACA. All rights reser)-8.8(ved. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 521.5236 20.9379 Tm [(www)60.6(.isaca.org)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 142.9471 673.7816 Tm -.005 Tc [(example, the semiconduct)9.8(or industry estimates that)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.821 673.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 661.7816 Tm -.005 Tc [(between US$75 billion and US$169 billion wor)-24.4(th of)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.1092 661.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 649.7816 Tm -.005 Tc [(counter)-7.3(feit semiconduct)9.8(or par)-24.4(ts are currently)]TJ ET EMC /P <>BDC BT 9 0 0 9 321.8897 649.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 637.7816 Tm -.005 Tc [(cir)9.3(culating in the marketplace.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 261.875 641.5565 Tm 0 Tc (8)Tj ET EMC /P <>BDC BT 9 0 0 9 264.8622 637.7816 Tm -.005 Tc ( Because of the)Tj ET EMC /P <>BDC BT 9 0 0 9 326.1416 637.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 625.7816 Tm -.005 Tc [(uncer)-24.4(tainty of the beha)7.3(vior of these counter)-7.3(feit)]TJ ET EMC /P <>BDC BT 9 0 0 9 328.1971 625.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 613.7816 Tm -.005 Tc [(pr)9.8(oducts, the condentiality, integrity, a)7.3(v)7.3(ailability)]TJ ET EMC /P <>BDC BT 9 0 0 9 333.5138 613.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 601.7816 Tm -.005 Tc [(\(CIA\) triad may be impacted where the data st)9.8(ored,)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.4705 601.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 589.7816 Tm -.005 Tc [(tr)19.5(ansmitted or pr)9.8(ocessed in the system may be)]TJ ET EMC /P <>BDC BT 9 0 0 9 328.3585 589.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 577.7816 Tm -.005 Tc [(subject t)9.8(o)0( accidental or unauthorized st)9.8(or)19.5(age,)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.0533 577.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 565.7816 Tm -.005 Tc [(pr)9.8(ocessing, access, destruction, alter)19.5(ation, loss or)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.1971 565.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 553.7816 Tm -.005 Tc [(lack of a)7.3(v)7.3(ailability during the life cycle of the IoT)]TJ ET EMC /P <>BDC BT 9 0 0 9 331.8439 553.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 541.7816 Tm -.005 Tc [(components. If the IoT)19.5( industry is aware of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 326.4185 541.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 529.7816 Tm -.005 Tc (damage caused by this lapse in security, why are)Tj ET EMC /P <>BDC BT 9 0 0 9 334.9164 529.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 517.7816 Tm -.005 Tc [(manufacturers and users of IoT)19.5( de)6.4(vices not doing)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.1483 517.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 505.7816 Tm -.005 Tc [(more t)9.8(o)0( mitigate these security threats?)]TJ ET EMC /P <>BDC BT 9 0 0 9 299.975 505.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 481.7816 Tm -.005 Tc [(One of the challenges facing security exper)-24.4(ts and)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.574 481.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 469.7816 Tm -.005 Tc [(manufacturers is that the IoT)19.5( ecosystem is complex)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.9001 469.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 457.7816 Tm -.005 Tc [(and presents a large attack sur)-7.3(face. )19.5(The situation is)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.0929 457.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.9471 445.7816 Tm -.005 Tc [(complicated by the fact that IoT)19.5( de)6.4(vices are)]TJ ET EMC /P <>BDC BT 9 0 0 9 315.4133 445.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 673.7816 Tm -.005 Tc [(tr)19.5(aditionally not cyberresilient, and they ha)7.3(ve long)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.6095 673.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 661.7816 Tm -.005 Tc (life spans \(typically greater than 10 years\). Finally,)Tj ET EMC /P <>BDC BT 9 0 0 9 557.7036 661.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 649.7816 Tm -.005 Tc [(the need t)9.8(o)0( physically go on-site and manually)]TJ ET EMC /P <>BDC BT 9 0 0 9 542.9903 649.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 637.7816 Tm -.005 Tc [(replace IoT)19.5( de)6.4(vices often deters oper)19.5(at)9.8(ors fr)9.8(om)]TJ ET EMC /P <>BDC BT 9 0 0 9 549.0054 637.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 625.7816 Tm -.005 Tc [(conducting the necessary maintenance, e)6.4(ven when)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.501 625.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 613.7816 Tm -.005 Tc [(a serious vulner)19.5(ability has been identied.)]TJ ET EMC /P <>BDC BT 9 0 0 9 526.0833 613.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS1 gs BT /F4 1 Tf 11 0 0 11 361.4471 587.7816 Tm .29 1 .45 .09 k -.005 Tc (Regulations and Guidelines)Tj ET EMC /P <>BDC BT 11 0 0 11 494.9395 587.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 361.4471 569.7816 Tm 0 0 0 1 k -.02 Tc [(Recognizing the impor)-24.4(tance of security and the long-)]TJ ET EMC /P <>BDC BT 9 0 0 9 361.4471 557.7816 Tm [(term implications of awed IoT)19.5( de)6.4(vices, the US)]TJ ET EMC /P <>BDC BT 9 0 0 9 540.0676 557.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 545.7816 Tm -.02 Tc (Senate,)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 389.6306 549.5565 Tm 0 Tc (9)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 392.483 548.7516 Tm -.0333 Tc (, )Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 394.5198 549.5565 Tm (10)Tj ET EMC /P <>BDC BT 9 0 0 9 400.2244 545.7816 Tm -.02 Tc ( the US State of California,)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 499.5418 549.5565 Tm -.0333 Tc (11)Tj ET EMC /P <>BDC BT 9 0 0 9 505.2464 545.7816 Tm -.02 Tc ( and the US)Tj ET EMC /P <>BDC BT 9 0 0 9 548.7281 545.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 533.7816 Tm -.02 Tc [(F)10.3(ood and Drug Administr)19.5(ation)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 475.9479 537.5565 Tm -.0333 Tc (12)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 481.6525 536.7516 Tm (, )Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 483.6892 537.5565 Tm (13)Tj ET EMC /P <>BDC BT 9 0 0 9 489.3937 533.7816 Tm -.02 Tc [( ha)7.3(ve spearheaded)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.6434 533.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 521.7816 Tm -.02 Tc [(effor)-24.4(ts t)9.8(o)0( regulate IoT)19.5( security. On the other side of)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.6127 521.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 509.7816 Tm -.02 Tc [(the A)8.3(tlantic, the E)8.3(u)0(r)9.8(opean P)5.4(arliament)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 502.5805 513.5565 Tm -.0333 Tc (14)Tj ET EMC /P <>BDC BT 9 0 0 9 508.2852 509.7816 Tm -.02 Tc ( and the)Tj ET EMC /P <>BDC BT 9 0 0 9 538.9034 509.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 497.7816 Tm -.02 Tc [(Depar)-24.4(tment of Digital, Culture, Media and Spor)-24.4(t in the)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.0414 497.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 485.7816 Tm -.02 Tc (United Kingdom)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 422.8635 489.5565 Tm -.0333 Tc (15)Tj ET EMC /P <>BDC BT 9 0 0 9 428.5682 485.7816 Tm -.02 Tc [( ha)7.3(ve issued regulations and)]TJ ET EMC /P <>BDC BT 9 0 0 9 537.3294 485.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 473.7816 Tm -.02 Tc [(guidelines that go)7.3(vern the security of IoT)106.5(. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 519.6854 473.7816 Tm (Figure 1)Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 551.2881 473.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 461.7816 Tm -.02 Tc (summarizes the applicable EU and US laws and their)Tj ET EMC /P <>BDC BT 9 0 0 9 561.6587 461.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.4471 449.7816 Tm -.02 Tc [(impacts on IoT)19.5( business stakeholders.)]TJ ET EMC /P <>BDC BT 9 0 0 9 508.7108 449.7816 Tm 0 Tc ( )Tj ET EMC /Figure <>BDC Q 0 .65 0 0 k /GS1 gs 142.5 415.709 423.1 15.5 re f .29 1 .45 .09 k 1 i 142.5 415.709 70.8 -24.75 re 213.3 415.709 46.7 -24.75 re 260 415.709 66.1 -24.75 re 326.1 415.709 239.5 -24.75 re f 0 .13 0 0 k 142.5 390.959 70.8 -54.75 re 213.3 390.959 46.7 -54.75 re 260 390.959 66.1 -54.75 re 326.1 390.959 239.5 -54.75 re 142.5 291.459 70.8 -64.75 re 213.3 291.459 46.7 -64.75 re 260 291.459 66.1 -64.75 re 326.1 291.459 239.5 -64.75 re f .255 .066 0 0 k 142.5 336.209 70.8 -44.75 re 213.3 336.209 46.7 -44.75 re 260 336.209 66.1 -44.75 re 326.1 336.209 239.5 -44.75 re 142.5 226.709 70.8 -104.75 re 213.3 226.709 46.7 -104.75 re 260 226.709 66.1 -104.75 re 326.1 226.709 239.5 -104.75 re f q 142 431.209 424 -347.261 re W n 0 0 0 0 K 0 J 0 j 1 w 10 M [] 0 d q 1 0 0 1 142.5 391.459 cm 0 0 m 0 23.25 l S Q 2 w q 1 0 0 1 142 415.709 cm 0 0 m 71.3 0 l S Q Q 0 0 0 0 K 0 J 0 j 2 w 10 M [] 0 d q 1 0 0 1 213.3 415.709 cm 0 0 m 112.8 0 l S 1 0 0 1 112.8 0 cm 0 0 m 239.5 0 l S Q q 142 431.209 424 -347.261 re W n 1 w q 1 0 0 1 142 390.959 cm 0 0 m 71.3 0 l S 1 0 0 1 .5 -54.25 cm 0 0 m 0 53.75 l S Q Q 1 w q 1 0 0 1 213.3 390.959 cm 0 0 m 46.7 0 l S 1 0 0 1 46.7 0 cm 0 0 m 66.1 0 l S Q q 142 431.209 424 -347.261 re W n q 1 0 0 1 326.1 390.959 cm 0 0 m 240 0 l S 1 0 0 1 239.5 -54.25 cm 0 0 m 0 53.75 l S 1 0 0 1 -423.1 -109.5 cm 0 0 m 0 63.75 l S 1 0 0 1 423.1 0 cm 0 0 m 0 63.75 l S 1 0 0 1 -423.1 64.75 cm 0 0 m 0 43.75 l S 1 0 0 1 -.5 44.25 cm 0 0 m 71.3 0 l S Q Q q 1 0 0 1 213.3 336.209 cm 0 0 m 46.7 0 l S 1 0 0 1 46.7 0 cm 0 0 m 66.1 0 l S Q q 142 431.209 424 -347.261 re W n q 1 0 0 1 326.1 336.209 cm 0 0 m 240 0 l S 1 0 0 1 -184.1 -44.75 cm 0 0 m 71.3 0 l S Q Q q 1 0 0 1 213.3 291.459 cm 0 0 m 46.7 0 l S 1 0 0 1 46.7 0 cm 0 0 m 66.1 0 l S Q q 142 431.209 424 -347.261 re W n q 1 0 0 1 326.1 291.459 cm 0 0 m 240 0 l S 1 0 0 1 -183.6 -169.5 cm 0 0 m 0 104.25 l S 1 0 0 1 -.5 104.75 cm 0 0 m 71.3 0 l S Q Q q 1 0 0 1 213.3 226.709 cm 0 0 m 46.7 0 l S 1 0 0 1 46.7 0 cm 0 0 m 66.1 0 l S Q q 142 431.209 424 -347.261 re W n q 1 0 0 1 326.1 226.709 cm 0 0 m 240 0 l S Q Q q 1 0 0 1 213.3 391.459 cm 0 0 m 0 23.25 l S 1 0 0 1 0 -54.75 cm 0 0 m 0 53.75 l S 1 0 0 1 0 -44.75 cm 0 0 m 0 43.75 l S 1 0 0 1 0 -64.75 cm 0 0 m 0 63.75 l S 1 0 0 1 0 -105.25 cm 0 0 m 0 104.25 l S 1 0 0 1 46.7 269.5 cm 0 0 m 0 23.25 l S 1 0 0 1 0 -54.75 cm 0 0 m 0 53.75 l S 1 0 0 1 0 -44.75 cm 0 0 m 0 43.75 l S 1 0 0 1 0 -64.75 cm 0 0 m 0 63.75 l S 1 0 0 1 0 -105.25 cm 0 0 m 0 104.25 l S 1 0 0 1 66.1 269.5 cm 0 0 m 0 23.25 l S 1 0 0 1 0 -54.75 cm 0 0 m 0 53.75 l S 1 0 0 1 0 -44.75 cm 0 0 m 0 43.75 l S 1 0 0 1 0 -64.75 cm 0 0 m 0 63.75 l S 1 0 0 1 0 -105.25 cm 0 0 m 0 104.25 l S Q BT /F8 1 Tf 10 0 0 10 275.908 419.7086 Tm 0 0 0 0 k -.015 Tc .023 Tw [(Figur)9.7(e 1US and EU Cybersecurity Laws)]TJ 9 0 0 9 170.8711 394.9586 Tm -.01 Tc 0 Tw (Law)Tj 5.577 1.111 TD -.0201 Tc [(Ef)-10.4(fe)-9.4(c)-11(t)-9.8(i)-11.1(v)-4.1(e)-19.4( )]TJ .837 -1.111 TD -.0094 Tc (Date)Tj 5.84 1.111 TD -.01 Tc [(Who Is)-9.7( )]TJ -.592 -1.111 TD -.0096 Tc -.0004 Tw [(Aff)11.2(e)1.3(cted?)-12987.9(K)12.3(e)7.3(y)-.2( P)7.1(o)-.7(ints)]TJ ET /GS2 gs BT /F9 1 Tf 9 0 0 9 146.5078 380.2076 Tm 0 0 0 1 k -.0095 Tc .0005 Tw [(US IoT)10.2( )]TJ T* 0 Tw [(Cybersecurity)-9.4( )]TJ T* -.0096 Tc -.0005 Tw [(Impr)9.2(o)7.7(v)6.1(ement Act)-10.2( )]TJ T* -.0004 Tw (of 2019)Tj 7.867 3.333 TD -.0093 Tc .0003 Tw [(P)6.9(ending*)-1631.7(IoT)19.7( contr)19.9(act)9.5(o)-.6(rs)-8.8( )]TJ 5.189 -1.111 TD [(and v)6.5(e)-.1(ndors)-9.2( )]TJ T* [(selling t)9.5(o)-.7( the)-9.7( )21.3( )]TJ T* -.0096 Tc -.0005 Tw [(US go)7.6(v)6.2(e)-.4(rnment)]TJ ET /GS1 gs BT /F10 1 Tf 9 0 0 9 330.108 380.2076 Tm .73 .19 0 0 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 334.518 380.2076 Tm 0 0 0 1 k -.0093 Tc .0003 Tw [( )219.5(High visibility)52.9(,)0( with dir)9.7(e).2(ct)9.4(or-le)6.1(v)6.8(el inv)7.7(o).5(lv)6.7(ement b)5.8(y).1( US Depar)-23.4(t).1(ment)-9.8( )]TJ .219 -1.111 TD [(of Homeland Security)52.8(,)0( NIST)107.5(, US Office of Management and)-9.6( )]TJ T* (Budget \(OMB\))Tj ET /GS1 gs BT /F10 1 Tf 9 0 0 9 330.108 350.2106 Tm .73 .19 0 0 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 334.518 350.2106 Tm 0 0 0 1 k -.0094 Tc .0004 Tw [( )219.6(Does not contain any known security vulner)19.6(abilities or def)11.1(e).1(cts)]TJ ET /GS1 gs BT /F10 1 Tf 9 0 0 9 330.108 340.2115 Tm .73 .19 0 0 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 334.518 340.2115 Tm 0 0 0 1 k -.0094 Tc .0004 Tw [( )219.9(Firmwar)9.5(e)0( pr)9.6(operly authenticated and trusted)]TJ -20.89 -1.639 TD -.0092 Tc -.0009 Tw [(California Senate)-9.9( )]TJ 0 -1.111 TD -.0098 Tc .0008 Tw (Bill No. 327)Tj 7.867 1.111 TD -.0094 Tc .0004 Tw [(1 Januar)-8.4(y)-9.1( )]TJ 0 -1.111 TD -.0096 Tc 0 Tw (2020)Tj 5.189 1.111 TD -.0088 Tc [(IoT)10.3( )]TJ 0 -1.111 TD -.0095 Tc [(manufactur)9.5(ers)-9.3( )]TJ T* -.0092 Tc .0002 Tw [(selling in)-8.8( )]TJ T* 0 Tw (California)Tj ET /GS1 gs BT /F10 1 Tf 9 0 0 9 330.108 325.4606 Tm .73 .19 0 0 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 334.518 325.4606 Tm 0 0 0 1 k -.0094 Tc -.0007 Tw [( )219.4(Manufactur)9.5(ers ar)9.5(e r)9.5(e)0(sponsible for pr)9.5(otecting the de)5.9(vice and any)-9.3( )]TJ .219 -1.111 TD .0004 Tw [(information contained ther)9.6(ein)-9.1( )]TJ ET /GS1 gs BT /F10 1 Tf 9 0 0 9 330.108 305.4626 Tm .73 .19 0 0 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 334.518 305.4626 Tm 0 0 0 1 k -.0093 Tc .0003 Tw [( )219.8(User must gener)19.7(a)-.7(te a new means of authentication befor)9.7(e)-9.9( )]TJ .219 -1.111 TD -.0096 Tc .0006 Tw [(access \(i.e., no fix)9.9(ed passwor)9.2(d\))]TJ -21.109 -1.639 TD -.0095 Tc .0005 Tw [(US F)10.5(ood and Drug)-9( )]TJ 0 -1.111 TD -.0097 Tc 0 Tw [(Administr)19(ation)-9.7( )]TJ T* .0007 Tw [(Pr)9.1(emark)9.9(e).6(t and)-10.1( )]TJ T* -.0162 Tc 0 Tw [(Po)-7.6(s)-6.6(t)-6.3(m)-7.2(a)-6.3(r)-6(k)2.7(e)-6.5(t)-16.3( )]TJ T* -.0095 Tc -.0006 Tw [(Management of)-10.1( )]TJ T* 0 Tw (Cybersecurity)Tj 7.867 5.556 TD .0004 Tw [(2014, 2016)-905.3(Medical de)6.1(vice)-10( )]TJ 5.189 -1.111 TD 0 Tw [(manufactur)9.5(ers)]TJ ET /GS1 gs BT /F10 1 Tf 9 0 0 9 330.108 280.7216 Tm .73 .19 0 0 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 334.518 280.7216 Tm 0 0 0 1 k -.0093 Tc .0003 Tw [( )219.6(Security r)9.6(e).1(quir)9.6(ements must be addr)9.6(essed during design,)-9.9( )]TJ .219 -1.111 TD [(manufacturing, implementation and oper)19.6(ation phases)]TJ ET /GS1 gs BT /F10 1 Tf 9 0 0 9 330.108 260.7236 Tm .73 .19 0 0 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 334.518 260.7236 Tm 0 0 0 1 k -.0094 Tc .0004 Tw [( )219.8(V)22.1(e)-.3(rification and v)7.5(a).1(lidation for softwar)9.4(e)-.3( updates and patches)]TJ -20.89 -4.972 TD -.0097 Tc -.0004 Tw [(Regulation \(EU\))-10.6( )]TJ 0 -1.111 TD .0006 Tw [(2019/881 on)-9.2( )]TJ T* -.0005 Tw [(ENISA and on)-9.5( )]TJ T* -.0094 Tc -.0007 Tw [(Information and)-9.5( )]TJ T* 0 Tw [(Communications)-9.2( )]TJ 0 -1.1111 TD -.0582 Tc [(Te)-48.5(c)-49.5(h)-49.6(n)-48.6(o)-49.5(l)-49.2(o)-49.5(g)-49.6(y)-57.6( )]TJ T* -.0095 Tc [(Cybersecurity)-9.4( )]TJ T* -.0093 Tc [(Cer)-23.4(t).2(ification)]TJ 7.867 7.778 TD -.0096 Tc .0006 Tw [(27 June)-10.2( )]TJ 0 -1.111 TD 0 Tw (2019**)Tj 5.189 1.111 TD -.0094 Tc [(Manufactur)9.5(ers)-9.2( )]TJ 0 -1.111 TD -.0098 Tc -.0003 Tw [(or pr)9(o)7.3(v)0(iders)-9.8( )]TJ T* -.0096 Tc -.0005 Tw [(of pr)9.2(oducts,)-10.2( )]TJ T* -.0095 Tc -.0006 Tw [(ser)-8.6(v)-.6(ices or)-9.6( )]TJ T* -.0097 Tc .0007 Tw [(pr)9(ocesses of)-10.5( )]TJ 0 -1.1109 TD 0 Tw (IoT***)Tj ET /GS1 gs BT /F10 1 Tf 9 0 0 9 330.108 215.9936 Tm .73 .19 0 0 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 334.518 215.9936 Tm 0 0 0 1 k -.0246 Tc [( )-14.5( )204.5(A E)8.9(u)-.4(r)9.7(o)-1(pean cybersecurity cer)-24.2(t).3(ification scheme shall be established)]TJ ET /GS1 gs BT /F10 1 Tf 9 0 0 9 330.108 205.9946 Tm .73 .19 0 0 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 334.518 205.9946 Tm 0 0 0 1 k -.0093 Tc .0003 Tw [( )219.9(Security of pr)9.7(otecting the a)7.3(v)7.8(ailability)52.9(,).4( authenticity)53.1(, integrity or)-9.4( )]TJ .219 -1.111 TD [(confidentiality of st)9.2(or)9.6(ed, tr)19.7(ansmitted or pr)9.5(ocessed data will be)-10( )]TJ T* [(attested against assur)19.7(a)-.9(nce le)6(v)6.4(e).1(ls of basic,)82.2()0( )39.7(s)0(ubstantial or)-9.5( )]TJ T* [(high)51.1().1( in accor)9.7(dance with the le)6.1(v)6.8(e).1(l of the risk associated with the)-9.8( )]TJ T* (intended use)Tj ET /GS1 gs BT /F10 1 Tf 9 0 0 9 330.108 155.9996 Tm .73 .19 0 0 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 334.518 155.9996 Tm 0 0 0 1 k -.0094 Tc .0004 Tw [( )219.7(Only authoriz)7.3(ed persons, pr)9.6(ogr)19.7(a)-.9(ms or machines ar)9.7(e able t)9.2(o)-9( )]TJ .219 -1.111 TD [(access the data, ser)-8.2(vices or functions)]TJ ET /GS1 gs BT /F10 1 Tf 9 0 0 9 330.108 136.0006 Tm .73 .19 0 0 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 334.518 136.0006 Tm 0 0 0 1 k -.0093 Tc .0003 Tw [( )219.8( )219.8(Softwar)9.7(e)-.2( and har)9.7(d).5(war)9.8(e).1( ar)9.8(e pr)9.7(o)8.1(v)-.4(ided with mechanisms for)-9.2( )39.3( )]TJ .219 -1.111 TD [(secur)9.5(e)0( updates)]TJ 6 0 0 6 146.5 113.4565 Tm [(* )21.4( )219.8(The bill is curr)9(ently being r)9(e)6.7(viewed and amended b)5.7(y)-.7( v)8.2(a)-.8(rious US Senate committees. When the r)9.2(e)6.6(view pr)9(ocess is complete, the b)]TJ 49.4673 0 TD [(ill will be v)8.2(o)-.8(ted on b)5.8(y)-.4( the Senate and, if appr)9.1(o)7(v)7.3(ed,)-9.7( )]TJ -48.8473 -1.167 TD [(sent t)9.7(o)-1.2( the US House of Repr)8.9(esentativ)7(e).6(s. If appr)8.8(o)7(v)7(e).3(d b)5.6(y)-.7( both houses of Congr)8.9(ess, the bill will be sent t)9.8(o)-1.2( the Pr)8.9(esident t)9.6(o)-1.2( be s)]TJ 47.9051 0 TD -.0091 Tc .0001 Tw [(igned int)10.4(o law)61.7(.)]TJ -48.5252 -1.167 TD -.0093 Tc .0003 Tw [(** )220.8(While the r)9.1(e).8(gulation has been enacted, the E)8.3(u).7(r)9(o)-.8(pean cybersecurity cer)-23.9(t).9(ification scheme, which is r)9.1(equir)9(ed under the r)9.1(e).7(gulat)]TJ 48.3253 0 TD [(ion, is y)6.6(e).4(t t)9.9(o)-.9( be de)6.8(v)7.6(e).8(loped. Cer)-23.9(t)1.1(ification against the)-9.2( )]TJ -47.2654 -1.167 TD .0002 Tw [(scheme will be v)8.4(o)-.5(luntar)-8.8(y initially but ma)7.5(y gr)19.1(adually become mandat)9.9(or)-8.8(y in the E)8.4(u).8(r)9.2(o)-.9(pean Union for critical pr)9.2(oducts or pr)9.2(ocesses.)]TJ -1.06 -1.167 TD [(*** )19.9(The r)9.2(e).9(gulation co)7.2(v)7.3(e).8(rs information and communications technology)52.6(, which encompasses IoT)107.2(.)]TJ ET EMC endstream endobj 110 0 obj <>/ExtGState<>>> endobj 145 0 obj <> endobj 150 0 obj <> endobj 155 0 obj <> endobj 164 0 obj <> endobj 169 0 obj <> endobj 174 0 obj <> endobj 179 0 obj <> endobj 180 0 obj <> endobj 182 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 490.9954 20.9379 Tm 0 0 0 1 k 0 Tc 0 Tw (ISACA )Tj ET EMC /P <>BDC BT 7 0 0 7 512.4738 20.9379 Tm (JOURNAL)Tj ET EMC /P <>BDC /GS1 gs BT 7 0 0 7 543.321 20.9379 Tm 0 .65 0 0 k [( V)6.4(OL 3)]TJ ET EMC /Artifact <>BDC 0 0 0 1 k /GS2 gs 572.364 0 .51599 31.289 re f EMC /P <>BDC /GS1 gs BT 7 0 0 7 587.3827 20.9379 Tm 0 .65 0 0 k (3)Tj ET EMC /P <>BDC /GS2 gs BT 7 0 0 7 36.4479 20.9379 Tm 0 0 0 1 k [( 2020 ISACA. All rights reser)-8.8(ved. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 144.0797 20.9379 Tm [(www)60.6(.isaca.org)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36.4479 673.7816 Tm -.005 Tc [(In addition t)9.8(o)0( publications by the US Depar)-24.4(tment of)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.5152 673.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 661.7816 Tm -.005 Tc (Homeland Security)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 111.4449 665.5565 Tm -.0083 Tc (16)Tj ET EMC /P <>BDC BT 9 0 0 9 117.4194 661.7816 Tm -.005 Tc ( and the US National Institute)Tj ET EMC /P <>BDC BT 9 0 0 9 232.3888 661.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 649.7816 Tm -.005 Tc [(of Standards and )19.5(Technology \(NIST\),)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 181.752 653.5565 Tm -.0083 Tc (17)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 187.7264 652.7516 Tm (, )Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 190.0334 653.5565 Tm (18)Tj ET EMC /P <>BDC BT 9 0 0 9 196.0078 649.7816 Tm -.005 Tc ( guidelines)Tj ET EMC /P <>BDC BT 9 0 0 9 238.5223 649.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 637.7816 Tm -.005 Tc [(ha)7.3(ve been published by other bodies and industry)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.2296 637.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 625.7816 Tm -.005 Tc [(associations. Because the IoT)19.5( t)9.8(ouches on many)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.0409 625.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 613.7816 Tm -.005 Tc [(disciplines and is applied at different le)6.4(vels, )]TJ ET EMC /P <>BDC BT 9 0 0 9 209.8854 613.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 601.7816 Tm -.005 Tc [(some IoT)19.5( security guidelines are written for a)]TJ ET EMC /P <>BDC BT 9 0 0 9 213.9831 601.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 589.7816 Tm -.005 Tc (specic industry,)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 102.7965 593.5565 Tm -.0083 Tc (19)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 108.771 592.7516 Tm (, )Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 111.0778 593.5565 Tm (20)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 117.0524 592.7516 Tm (, )Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 119.3592 593.5565 Tm (21)Tj ET EMC /P <>BDC BT 9 0 0 9 125.3337 589.7816 Tm -.005 Tc ( while others are more)Tj ET EMC /P <>BDC BT 9 0 0 9 213.14 589.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 577.7816 Tm -.005 Tc [(gener)19.5(ally applicable.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 117.013 581.5565 Tm -.0083 Tc (22)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 122.9876 580.7516 Tm (, )Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 125.2944 581.5565 Tm (23)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 131.2689 581.5565 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS1 gs BT /F4 1 Tf 11 0 0 11 36.4479 551.7816 Tm .29 1 .45 .09 k -.005 Tc [(IoT)29.3( Security F)12.7(r)14.7(amework)]TJ ET EMC /P <>BDC BT 11 0 0 11 152.688 551.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 36.4479 533.7816 Tm 0 0 0 1 k -.005 Tc [(It would be highly desir)19.5(able t)9.8(o)0( adopt one baseline)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.7705 533.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 521.7816 Tm -.005 Tc [(security fr)19.5(amework, but unfor)-24.4(tunately, there is no)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.3731 521.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 509.7816 Tm -.005 Tc [(one-size-ts-all solution t)9.8(o)0( IoT)19.5( security. )19.5(The security)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.7453 509.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 497.7816 Tm -.005 Tc [(fr)19.5(amework adopted by most security-conscious)]TJ ET EMC /P <>BDC BT 9 0 0 9 224.3475 497.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 485.7816 Tm -.005 Tc [(pr)19.5(actitioners is the NIST)19.5( Cybersecurity F)12.7(r)19.5(amework)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.8697 485.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 473.7816 Tm -.005 Tc (\(CSF\).)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 60.9235 477.5565 Tm -.0083 Tc (24)Tj ET EMC /P <>BDC BT 9 0 0 9 66.8982 473.7816 Tm -.005 Tc [( )19.5(The following sections explain how )]TJ ET EMC /P <>BDC BT 9 0 0 9 209.6304 473.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 461.7816 Tm -.005 Tc [(some well-pr)9.8(o)7.3(ven technical measures can be)]TJ ET EMC /P <>BDC BT 9 0 0 9 213.9916 461.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 449.7816 Tm -.005 Tc [(implemented t)9.8(o)0( achie)6.4(ve security and priv)7.3(acy by)]TJ ET EMC /P <>BDC BT 9 0 0 9 222.9876 449.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 437.7816 Tm -.005 Tc [(design, thereby enabling manufacturers t)9.8(o)0( identify)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.9653 437.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 425.7816 Tm -.005 Tc [(threats and pr)9.8(otect against them. )19.5(This helps ser)-8.8(vice)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.9506 425.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 413.7816 Tm -.005 Tc [(oper)19.5(at)9.8(ors detect, respond and reco)7.3(ver in the)]TJ ET EMC /P <>BDC BT 9 0 0 9 210.3862 413.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.4479 401.7816 Tm -.005 Tc [(oper)19.5(ation phase more effectively and efciently.)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.8946 401.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F11 1 Tf 9 0 0 9 255.6272 673.7816 Tm -.005 Tc [(Five Key Principles of IoT)29.3( Security )]TJ ET EMC /P <>BDC BT 9 0 0 9 392.9189 673.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 255.6272 661.7816 Tm -.005 Tc [(The ve key principles of IoT)19.5( security are)]TJ ET EMC /P <>BDC BT 9 0 0 9 416.1598 661.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.6272 649.7816 Tm -.005 Tc (summarized in )Tj ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 316.4109 649.7816 Tm (gure 2. )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 352.0632 649.7816 Tm (If these principles are)Tj ET EMC /P <>BDC BT 9 0 0 9 436.8495 649.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.6272 637.7816 Tm -.005 Tc [(followed, the business goals of IoT)19.5( de)6.4(vice)]TJ ET EMC /P <>BDC BT 9 0 0 9 420.4972 637.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.6272 625.7816 Tm -.005 Tc (manufacturers will be aligned with security and)Tj ET EMC /P <>BDC BT 9 0 0 9 441.2693 625.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.6272 613.7816 Tm -.005 Tc [(compliance requirements. )19.5(These requirements can)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.3644 613.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.6272 601.7816 Tm -.005 Tc [(be met when the rele)6.4(v)7.3(ant technological and)]TJ ET EMC /P <>BDC BT 9 0 0 9 427.1945 601.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.6272 589.7816 Tm -.005 Tc [(pr)9.8(ocedur)19.5(al contr)9.8(ols are in place.)]TJ ET EMC /P <>BDC BT 9 0 0 9 382.1599 589.7816 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 255.6272 571.7816 Tm .29 1 .45 .09 k -.005 Tc (1.)Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 263.3155 571.7816 Tm 0 0 0 1 k [( Ensure that de)6.4(vices function only as specied:)]TJ ET EMC /P <>BDC BT 9 0 0 9 447.8986 571.7816 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.0335 559.7816 Tm [(De)6.4(vices accept only authorized, trusted data)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 453.43 559.7816 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 266.6272 559.7816 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.6271 547.7816 Tm [(fr)9.8(om trusted sour)9.3(ces.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 363.7424 547.7816 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.0335 535.7816 Tm [(De)6.4(vices will not run unauthorized rmware or)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 456.9192 535.7816 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 266.6272 535.7816 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.6271 523.7816 Tm (application codes, including malware.)Tj ET EMC /LBody <>BDC BT 9 0 0 9 427.6873 523.7816 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.0335 511.7816 Tm -.02 Tc [(Unauthorized commands cannot run in de)6.4(vices.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 459.2262 511.7816 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 266.6272 511.7816 Tm ()Tj ET EMC /P <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 255.6272 493.7816 Tm .29 1 .45 .09 k -.005 Tc (2.)Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 263.3155 493.7816 Tm 0 0 0 1 k [( Pre)6.4(vent counter)-7.3(feits fr)9.8(om running in the system:)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.7934 493.7816 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.0335 481.7816 Tm [(Only trusted de)6.4(vices can be connected and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 448.1829 481.7816 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 266.6272 481.7816 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.6271 469.7816 Tm (communicated with.)Tj ET EMC /LBody <>BDC BT 9 0 0 9 359.1896 469.7816 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.0335 457.7816 Tm [(De)6.4(vices, software codes and commands are)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 453.698 457.7816 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 266.6272 457.7816 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.6271 445.7816 Tm (mutually authenticated.)Tj ET EMC /LBody <>BDC BT 9 0 0 9 371.4988 445.7816 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.0335 433.7816 Tm (Software, including rmware and application)Tj ET EMC /LBody <>BDC BT 9 0 0 9 454.5198 433.7816 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 266.6272 433.7816 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.6271 421.7816 Tm (codes, cannot be illegally copied.)Tj ET EMC /LBody <>BDC BT 9 0 0 9 409.2433 421.7816 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 277.0335 409.7816 Tm (There is no xed password.)Tj ET EMC /LBody <>BDC BT 9 0 0 9 386.677 409.7816 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 266.6272 409.7816 Tm ()Tj ET EMC /Figure <>BDC Q q 1 i 37.252 385.611 600.193 -308.225 re W n 37.127 385.611 600.318 -308.225 re W n 37.127 385.611 422.436 -308.225 re 272.534 409.782 m W* n 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n .019608 .65098 .015686 0 k /GS1 gs 37.252 370.861 421.839 14.75 re f .05098 .14902 .070588 0 k 37.252 77.386 421.839 292.183 re f 0 0 0 0 K 0 J 0 j 1.991 w 10 M [] 0 d q 1 0 0 1 37.164 370.861 cm 0 0 m 421.997 0 l S 1 0 0 1 -.0371 -.2227 cm 0 0 m 421.997 0 l S Q Q q 1 i 37.127 385.611 600.318 -308.225 re W n 37.127 385.611 422.436 -308.225 re 272.534 409.782 m W* n 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n /GS1 gs BT /F8 1 Tf 9 0 0 9 163.5392 375.4864 Tm 0 0 0 0 k 0 Tc 0 Tw [(Figur)9.6(e).1( 2The 5 K)11.1(e)6.8(y Principles in IoT)28.9( Pr)17.7(otection)]TJ ET .25471 .068585 0 0 k q 1 0 0 1 160.904 236.78 cm 0 0 m 0 8.234 6.603 14.91 14.748 14.91 c 73.737 14.91 l 81.882 14.91 88.485 8.234 88.485 0 c 88.485 -87.638 l 88.485 -95.873 81.882 -102.548 73.737 -102.548 c 14.748 -102.548 l 6.603 -102.548 0 -95.873 0 -87.638 c 0 0 l f Q .72775 .19596 0 0 K 0 J 0 j .995 w 10 M [] 0 d q 1 0 0 1 160.904 236.78 cm 0 0 m 0 8.234 6.603 14.91 14.748 14.91 c 73.737 14.91 l 81.882 14.91 88.485 8.234 88.485 0 c 88.485 -87.638 l 88.485 -95.873 81.882 -102.548 73.737 -102.548 c 14.748 -102.548 l 6.603 -102.548 0 -95.873 0 -87.638 c 0 0 l s Q q 1 0 0 1 67.815 236.78 cm 0 0 m 0 8.234 6.6294 14.91 14.807 14.91 c 74.035 14.91 l 82.212 14.91 88.842 8.234 88.842 0 c 88.842 -87.638 l 88.842 -95.873 82.212 -102.548 74.035 -102.548 c 14.807 -102.548 l 6.6294 -102.548 0 -95.873 0 -87.638 c 0 0 l f Q .997 w q 1 0 0 1 67.815 236.78 cm 0 0 m 0 8.234 6.6294 14.91 14.807 14.91 c 74.035 14.91 l 82.212 14.91 88.842 8.234 88.842 0 c 88.842 -87.638 l 88.842 -95.873 82.212 -102.548 74.035 -102.548 c 14.807 -102.548 l 6.6294 -102.548 0 -95.873 0 -87.638 c 0 0 l s Q q 1 0 0 1 253.99 236.811 cm 0 0 m 0 8.217 6.624 14.879 14.795 14.879 c 73.975 14.879 l 82.146 14.879 88.77 8.217 88.77 0 c 88.77 -87.7 l 88.77 -95.917 82.146 -102.578 73.975 -102.578 c 14.795 -102.578 l 6.624 -102.578 0 -95.917 0 -87.7 c 0 0 l f Q q 1 0 0 1 253.99 236.811 cm 0 0 m 0 8.217 6.624 14.879 14.795 14.879 c 73.975 14.879 l 82.146 14.879 88.77 8.217 88.77 0 c 88.77 -87.7 l 88.77 -95.917 82.146 -102.578 73.975 -102.578 c 14.795 -102.578 l 6.624 -102.578 0 -95.917 0 -87.7 c 0 0 l s Q q 1 0 0 1 347.783 236.818 cm 0 0 m 0 8.213 6.611 14.872 14.765 14.872 c 73.824 14.872 l 81.979 14.872 88.589 8.213 88.589 0 c 88.589 -87.714 l 88.589 -95.927 81.979 -102.585 73.824 -102.585 c 14.765 -102.585 l 6.611 -102.585 0 -95.927 0 -87.714 c 0 0 l f Q .996 w q 1 0 0 1 347.783 236.818 cm 0 0 m 0 8.213 6.611 14.872 14.765 14.872 c 73.824 14.872 l 81.979 14.872 88.589 8.213 88.589 0 c 88.589 -87.714 l 88.589 -95.927 81.979 -102.585 73.824 -102.585 c 14.765 -102.585 l 6.611 -102.585 0 -95.927 0 -87.714 c 0 0 l s Q .24314 .96078 .39216 .12941 k q 1 0 0 1 433.089 303.203 cm 0 0 m -374.678 0 l -376.328 0 -377.678 1.3501 -377.678 3 c -377.678 50.649 l -377.678 52.299 -376.328 53.649 -374.678 53.649 c 0 53.649 l 1.65 53.649 3 52.299 3 50.649 c 3 3 l 3 1.3501 1.65 0 0 0 c f Q .72775 .19596 0 0 k q 1 0 0 1 68.31 274.462 cm 0 0 m -2.8725 15.271 17.166 14.333 v 77.331 14.333 l 88.998 16.166 88.998 3.666 v 88.998 -38.999 l 90.998 -48.832 77.331 -49.999 v 62.165 -55.332 55.832 -61.832 v 45.832 -69.498 34.666 -61.332 v 22.499 -53.499 17.666 -51.665 v 9.166 -49.666 7.1665 -49.499 v -.5 -47.666 -.3335 -35.333 v 0 0 l f Q q 1 0 0 1 161.089 274.462 cm 0 0 m -2.845 15.271 17.166 14.333 v 77.331 14.333 l 88.997 16.166 88.997 3.666 v 88.997 -38.999 l 90.997 -48.832 77.331 -49.999 v 62.165 -55.332 55.832 -61.832 v 45.832 -69.498 34.665 -61.332 v 22.499 -53.499 17.666 -51.665 v 9.166 -49.666 7.166 -49.499 v -.5 -47.666 -.334 -35.333 v 0 0 l f Q q 1 0 0 1 254.2 274.462 cm 0 0 m -3.149 15.271 17.167 14.333 v 77.332 14.333 l 88.998 16.166 88.998 3.666 v 88.998 -38.999 l 90.998 -48.832 77.332 -49.999 v 62.165 -55.332 55.832 -61.832 v 45.832 -69.498 34.666 -61.332 v 22.5 -53.499 17.667 -51.665 v 9.167 -49.666 7.167 -49.499 v -.5 -47.666 -.333 -35.333 v 0 0 l f Q q 1 0 0 1 347.977 274.462 cm 0 0 m -3.79 15.271 17.166 14.333 v 77.331 14.333 l 88.998 16.166 88.998 3.666 v 88.998 -38.999 l 90.998 -48.832 77.331 -49.999 v 62.165 -55.332 55.832 -61.832 v 45.832 -69.498 34.666 -61.332 v 22.499 -53.499 17.666 -51.665 v 9.166 -49.666 7.167 -49.499 v -.5 -47.666 -.333 -35.333 v 0 0 l f Q .019608 .65098 .015686 0 k q 1 0 0 1 86.653 300.732 cm 0 0 m 13.352 0 l 13.352 11.7 l 40.055 11.7 l 40.055 0 l 53.407 0 l 26.704 -11.699 l 0 0 l f Q q 1 0 0 1 179.685 300.732 cm 0 0 m 13.352 0 l 13.352 11.7 l 40.055 11.7 l 40.055 0 l 53.407 0 l 26.703 -11.699 l 0 0 l f Q q 1 0 0 1 271.223 300.732 cm 0 0 m 13.352 0 l 13.352 11.7 l 40.055 11.7 l 40.055 0 l 53.407 0 l 26.703 -11.699 l 0 0 l f Q q 1 0 0 1 368.549 300.732 cm 0 0 m 13.352 0 l 13.352 11.7 l 40.056 11.7 l 40.056 0 l 53.407 0 l 26.704 -11.699 l 0 0 l f Q q 1 0 0 1 430.779 245.367 cm 0 0 m 18.126 0 l 18.701 0 19.167 -.466 19.167 -1.042 c 19.167 -132.237 l 19.167 -132.811 18.702 -133.277 18.128 -133.278 c -379.255 -134.027 l -379.532 -134.027 -379.798 -133.918 -379.994 -133.721 c -380.19 -133.525 -380.299 -133.259 -380.298 -132.982 c -379.848 -1.23 l -379.846 -.656 -379.38 -.191 -378.806 -.191 c -362.681 -.191 l -362.681 -2.275 l -378.806 -2.275 l -377.765 -1.237 l -378.215 -132.989 l -379.259 -131.944 l 18.124 -131.195 l 17.084 -132.237 l 17.084 -1.042 l 18.126 -2.084 l .001 -2.084 l 0 0 l h 1.042 -4.167 m -5.208 -1.042 l 1.042 2.083 l 1.042 -4.167 l h -363.722 1.892 m -357.472 -1.233 l -363.722 -4.358 l -363.722 1.892 l f Q .25471 .068585 0 0 k q 1 0 0 1 165.852 119.586 cm 0 0 m 0 3.26 2.715 5.902 6.064 5.902 c 258.203 5.902 l 261.552 5.902 264.267 3.26 264.267 0 c 264.267 -23.608 l 264.267 -26.868 261.552 -29.51 258.203 -29.51 c 6.064 -29.51 l 2.715 -29.51 0 -26.868 0 -23.608 c 0 0 l f Q .987 w q 1 0 0 1 165.852 119.586 cm 0 0 m 0 3.26 2.715 5.902 6.064 5.902 c 258.203 5.902 l 261.552 5.902 264.267 3.26 264.267 0 c 264.267 -23.608 l 264.267 -26.868 261.552 -29.51 258.203 -29.51 c 6.064 -29.51 l 2.715 -29.51 0 -26.868 0 -23.608 c 0 0 l s Q .24314 .96078 .39216 .12941 k q 1 0 0 1 172.423 89.499 cm 0 0 m -107.364 0 l -109.014 0 -110.364 1.35 -110.364 3 c -110.364 33.855 l -110.364 35.505 -109.014 36.855 -107.364 36.855 c 0 36.855 l 1.65 36.855 3 35.505 3 33.855 c 3 3 l 3 1.35 1.65 0 0 0 c f Q .019608 .65098 .015686 0 k q 1 0 0 1 181.555 90.911 cm 0 0 m 0 8.286 l -8.023 8.286 l -8.023 24.858 l 0 24.858 l 0 33.144 l 8.023 16.572 l 0 0 l f Q BT 8 0 0 8 189.9432 328.8614 Tm 0 0 0 0 k .0001 Tc -.0001 Tw [(2. Pr)9(e)7.1(v)6.4(ent)]TJ -.301 -1 TD .0002 Tc 0 Tw [(counter)-9.2(f)12.8(eit.)]TJ 10.1941 1 TD -.0002 Tw [(3. Ensur)8.6(e).5( security)]TJ 1.2069 -1 TD .0003 Tc -.0003 Tw [(and priv)7.8(acy)81.6(.)]TJ 10.2605 1 TD .0002 Tc -.0002 Tw [(4. Ensur)8.6(e).4( sustainable)]TJ 2.2539 -1 TD .0001 Tc 0 Tw [(oper)15.4(ation.)]TJ -37.2949 1 TD .0002 Tc -.0002 Tw [(1. Ensur)8.7(e).4( de)7.7(vice will)]TJ -.0032 -1 TD .0001 Tc -.0001 Tw [(beha)7.4(v)6.3(e).7( as specified.)]TJ 13.273 -6.7007 TD .0002 Tc -.0002 Tw [(Secur)9.6(e).4( data )]TJ .5794 -1 TD 0 Tc 0 Tw [(ex)10.5(change)]TJ /F9 1 Tf -.6849 -1 TD -.0002 Tc (only between)Tj -.3824 -1 TD (trusted entities)Tj /F8 1 Tf 11.908 3 TD .0002 Tc -.0002 Tw [(Ensur)9.2(e).4( only )]TJ -1.3176 -1 TD .0003 Tc -.0003 Tw [(authoriz)9.6(ed entities)]TJ /F9 1 Tf .3339 -1 TD -.0001 Tc -.0001 Tw [(can r)9.3(e).4(ad the data)]TJ /F8 1 Tf 11.7303 2 TD .0002 Tc -.0002 Tw (Enable security )Tj .813 -1 TD .0004 Tc 0 Tw (updatability)Tj /F9 1 Tf .2603 -1 TD 0 Tc -.0002 Tw [(on de)6.5(vices)]TJ /F8 1 Tf -35.6261 2 TD .0002 Tc [(T)32.5(r).2(ust the sour)9.4(ce)]TJ /F9 1 Tf 1.1336 -1 TD -.0001 Tc -.0001 Tw (of the data)Tj /F8 1 Tf .74609 .67578 .66797 .89844 k 9.3536 -8.2136 TD .0003 Tc -.0003 Tw (Mutual authentication)Tj /F9 1 Tf .265 -1 TD -.0003 Tc .0001 Tw (between devices and)Tj -.0886 -1 TD -.0002 Tc 0 Tw [(back-end thr)8.9(o)-.7(ugh PKI)]TJ .0625 -1 TD .0001 Tc -.0003 Tw [(\(no fix)9.9(e).6(d passwor)9.7(ds\))]TJ 10.8969 3 TD -.0001 Tc -.0001 Tw [(Only authoriz)7.8(ed ser)-9.1(v)7(ers)]TJ .4045 -1 TD -.0002 Tc 0 Tw [(and peoples will ha)6.7(v)6.9(e)]TJ -.9135 -1 TD .0001 Tc -.0003 Tw [(access t)10(o)-.4( )]TJ /F8 1 Tf 4.0278 0 TD .0003 Tc 0 Tw (data )Tj /F9 1 Tf 1.9746 0 TD -.0001 Tc (at )Tj /F8 1 Tf 1.0034 0 TD [(de)6.7(vices)]TJ /F9 1 Tf 3.0616 0 TD 0 Tc (,)Tj /F8 1 Tf -9.5704 -1 TD -.0001 Tc [(on-pr)8.8(e).1(m)]TJ /F9 1 Tf 3.3906 0 TD -.0002 Tc ( or in the )Tj /F8 1 Tf 3.6816 0 TD .0001 Tc (cloud)Tj 5.6939 3 TD -.0001 Tw [(Sign all softwar)9.4(e)]TJ /F9 1 Tf .8126 -1 TD -.0001 Tc (updates and )Tj -1.0275 -1 TD 0 Tc -.0002 Tw [(r)9.3(e).1(new de)6.5(vice k)9.8(e)6.5(ys)]TJ .3515 -1 TD -.0003 Tw [(and cer)-24.8(t)0(ificates.)]TJ /F8 1 Tf .4759 -1 TD .0002 Tc 0 Tw [(Cr)-8.5(ypt)14.3(o)1.2(-agility)]TJ /F9 1 Tf -35.0875 4 TD 0 Tc -.0002 Tw [(De)6.7(vice, firmwar)9.5(e).3(,)]TJ -.97 -1 TD -.0001 Tc -.0001 Tw (application codes and)Tj 1.4104 -1 TD .0002 Tc -.0004 Tw [(commands ar)8.9(e)]TJ .0967 -1 TD .0003 Tc -.0005 Tw [(pr)10.4(otected with)]TJ /F8 1 Tf .4062 -1 TD -.0003 Tw [(priv)8.1(ate k)10.9(e)7.4(ys)]TJ /F9 1 Tf -.4485 -1 TD 0 Tc -.0002 Tw [(managed fr)8.7(om)]TJ .7478 -1 TD .0001 Tc -.0003 Tw [(the fact)8.3(or)-8.6(y)]TJ /F8 1 Tf 0 0 0 0 k -2.6968 -4.4949 TD .0002 Tc -.0002 Tw [(5. Ensur)8.7(e).4( sound situational)]TJ 3.1763 -1 TD 0 Tc 0 Tw [(awar)9.9(eness.)]TJ .74609 .67578 .66797 .89844 k 17.1264 1.4645 TD .0002 Tc -.0002 Tw [(Continual Assessment and Assur)12.6(a)0(nce)]TJ /F9 1 Tf -3.6773 -1 TD 0 Tc [(Monit)9(oring includes access attempts, network tr)16.6(affic and)]TJ 3.1445 -1 TD -.0002 Tc 0 Tw [(beha)6.9(vior using AI and shar)9.5(ed intelligence)]TJ /F8 1 Tf 14 0 0 14 207.4932 340.8301 Tm 0 0 0 0 k 0 Tc (5 Business goals)Tj ET EMC Q endstream endobj 183 0 obj <>/ExtGState<>>> endobj 206 0 obj <> endobj 211 0 obj <> endobj 216 0 obj <> endobj 225 0 obj <> endobj 230 0 obj <> endobj 235 0 obj <> endobj 240 0 obj <> endobj 249 0 obj <> endobj 254 0 obj <> endobj 263 0 obj <> endobj 265 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 39.4019 20.9698 Tm 0 0 0 1 k 0 Tc 0 Tw (ISACA )Tj ET EMC /P <>BDC BT 7 0 0 7 60.8804 20.9698 Tm (JOURNAL)Tj ET EMC /P <>BDC /GS1 gs BT 7 0 0 7 91.7275 20.9698 Tm 0 .65 0 0 k [( V)6.4(OL 3)]TJ ET EMC /Artifact <>BDC 0 0 0 1 k /GS2 gs 30.069 0 .51505 31.531 re f EMC /P <>BDC /GS1 gs BT 7 0 0 7 12.8637 20.9698 Tm 0 .65 0 0 k (4)Tj ET EMC /P <>BDC /GS2 gs BT 7 0 0 7 413.8918 20.9379 Tm 0 0 0 1 k [( 2020 ISACA. All rights reser)-8.8(ved. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 521.5236 20.9379 Tm [(www)60.6(.isaca.org)]TJ ET EMC /P <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 142.5007 662.7607 Tm .29 1 .45 .09 k -.005 Tc (3.)Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 150.1891 662.7607 Tm 0 0 0 1 k [( Ensure security and priv)7.3(acy:)]TJ ET EMC /P <>BDC BT 9 0 0 9 262.3558 662.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 163.907 650.7607 Tm (Only authorized entities can read data)Tj ET EMC /LBody <>BDC BT 9 0 0 9 314.6174 650.7607 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 153.5007 650.7607 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 638.7607 Tm (intended for them.)Tj ET EMC /LBody <>BDC BT 9 0 0 9 237.9246 638.7607 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 163.907 626.7607 Tm [(Data security and priv)7.3(acy are pr)9.8(otected in)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 328.992 626.7607 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 153.5007 626.7607 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 614.7607 Tm (accordance with international standards such)Tj ET EMC /LBody <>BDC BT 9 0 0 9 346.6804 614.7607 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 602.7607 Tm [(as the EU Gener)19.5(al Data Pr)9.8(otection Regulation)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 344.2679 602.7607 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 590.7607 Tm (\(GDPR\) and industry-specic standards such)Tj ET EMC /LBody <>BDC BT 9 0 0 9 342.8528 590.7607 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 578.7607 Tm [(as the P)5.4(ayment Card Industry Data Security)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 337.4651 578.7607 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 566.7607 Tm (Standard \(PCI DSS\).)Tj ET EMC /LBody <>BDC BT 9 0 0 9 244.3274 566.7607 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 163.907 554.7607 Tm -.02 Tc [(Pr)9.8(otection extends t)9.8(o)0( the edge and in the cloud.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 345.6172 554.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 153.5007 554.7607 Tm ()Tj ET EMC /P <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 142.5007 536.7607 Tm .29 1 .45 .09 k -.005 Tc (4.)Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 150.1891 536.7607 Tm 0 0 0 1 k [( Ensure sustainable oper)19.5(ation:)]TJ ET EMC /P <>BDC BT 9 0 0 9 269.2629 536.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 163.907 524.7607 Tm [(Security is updatable on de)6.4(vices.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 294.5872 524.7607 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 153.5007 524.7607 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 163.907 512.7607 Tm (Firmware and application codes are updated)Tj ET EMC /LBody <>BDC BT 9 0 0 9 341.5427 512.7607 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 153.5007 512.7607 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 500.7607 Tm [(and crypt)9.8(ogr)19.5(aphically signed.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 281.2327 500.7607 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 163.907 488.7607 Tm [(Crypt)9.8(o-agility is built int)9.8(o de)6.4(vices and at the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 337.0428 488.7607 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 153.5007 488.7607 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 476.7607 Tm [(back end for postquantum oper)19.5(ation.)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 312.5393 479.7307 Tm (25)Tj ET EMC /LBody <>BDC BT 9 0 0 9 318.6039 476.7607 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 163.907 464.7607 Tm [(There is aut)9.8(omated oper)19.5(ation with no )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 315.2986 464.7607 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 153.5007 464.7607 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 452.7607 Tm [(human inter)-8.8(vention.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 244.0637 452.7607 Tm ( )Tj ET EMC /P <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 142.5007 434.7607 Tm .29 1 .45 .09 k -.005 Tc (5.)Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 150.1891 434.7607 Tm 0 0 0 1 k ( Ensure sound situational awareness:)Tj ET EMC /P <>BDC BT 9 0 0 9 297.2411 434.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 163.907 422.7607 Tm [(Continual assessment and assur)19.5(ance )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 315.9797 422.7607 Tm ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 153.5007 422.7607 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 410.7607 Tm [(are per)-7.3(formed.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 223.7698 410.7607 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 163.907 398.7607 Tm (M)Tj ET EMC /LBody <>BDC BT 9 0 0 9 171.7644 398.7607 Tm -.02 Tc [(onit)9.8(oring includes access attempts, network)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 340.312 398.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC BT 9 0 0 9 153.5007 398.7607 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 386.7607 Tm -.02 Tc [(tr)19.5(afc and beha)7.3(vior with the help of ar)-24.4(ticial)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 331.5724 386.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 164.5007 374.7607 Tm -.02 Tc (intelligence \(AI\) and shared intelligence.)Tj ET EMC /LBody <>BDC BT 9 0 0 9 316.4105 374.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.5007 350.7607 Tm -.005 Tc [(By following these principles, IoT)19.5( de)6.4(vices and)]TJ ET EMC /P <>BDC BT 9 0 0 9 321.1655 350.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.5007 338.7607 Tm -.005 Tc (systems can defend themselves against)Tj ET EMC /P <>BDC BT 9 0 0 9 301.3598 338.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 142.5007 326.7607 Tm -.005 Tc (cybersecurity risk.)Tj ET EMC /P <>BDC BT 9 0 0 9 214.0152 326.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F11 1 Tf 9 0 0 9 361.0007 662.7607 Tm -.005 Tc [(Pr)17.6(otecting the Chain of )29.3(T)31.8(rust)]TJ ET EMC /P <>BDC BT 9 0 0 9 475.3691 662.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 361.0007 650.7607 Tm -.02 Tc [(Public key infr)19.5(astructure \(PKI\) is the technology that)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.5808 650.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 638.7607 Tm -.02 Tc [(enables the mutual authentication of de)6.4(vices and)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.582 638.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 626.7607 Tm -.02 Tc [(codes. )19.5(This ensures that only authorized de)6.4(vices,)]TJ ET EMC /P <>BDC BT 9 0 0 9 547.923 626.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 614.7607 Tm -.02 Tc (rmware and application codes can run in a system.)Tj ET EMC /P <>BDC BT 9 0 0 9 559.7665 614.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 602.7607 Tm -.02 Tc [(This technology also suppor)-24.4(ts subscriber identity)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.5164 602.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 590.7607 Tm -.02 Tc (module \(SIM\)-based security.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 473.0668 594.5356 Tm -.0333 Tc (26)Tj ET EMC /P <>BDC BT 9 0 0 9 478.7714 590.7607 Tm -.02 Tc [( )19.5(The idea is that each)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.6835 590.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 578.7607 Tm -.02 Tc [(entity in the system \(this includes the IoT)19.5( hardware,)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.2339 578.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 566.7607 Tm -.02 Tc [(bootstr)19.5(ap, rmware and application code\) is given a)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.2154 566.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 554.7607 Tm -.02 Tc [(unique digital cer)-24.4(ticate signed by a trusted par)-24.4(ty.)]TJ ET EMC /P <>BDC BT 9 0 0 9 550.9076 554.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 542.7607 Tm -.02 Tc [(The signing pr)9.8(ocess is usually per)-7.3(formed during the)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.2726 542.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 530.7607 Tm -.02 Tc [(manufacturing stage using the manufacturer)-7.8()54.7(s)0( priv)7.3(ate)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.5238 530.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 518.7607 Tm -.02 Tc [(key. When a de)6.4(vice needs an update and rmware is)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.4915 518.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 506.7607 Tm -.02 Tc [(going t)9.8(o)0( be loaded int)9.8(o the de)6.4(vice, the rmware and)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.5562 506.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 494.7607 Tm -.02 Tc [(the de)6.4(vice mutually authenticate each other based on)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.6142 494.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 482.7607 Tm -.02 Tc [(the signed cer)-24.4(ticates before the rmware is)]TJ ET EMC /P <>BDC BT 9 0 0 9 531.3723 482.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 470.7607 Tm -.02 Tc (accepted and loaded. Similarly, communications)Tj ET EMC /P <>BDC BT 9 0 0 9 546.1207 470.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 458.7607 Tm -.02 Tc [(between de)6.4(vices are crypt)9.8(ogr)19.5(aphically pr)9.8(otected \(via)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.1074 458.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 446.7607 Tm -.02 Tc [(crypt)9.8(ogr)19.5(aphic signature and encryption\), so that only)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.9448 446.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 434.7607 Tm -.02 Tc [(authorized de)6.4(vices can communicate with each other)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.8774 434.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 422.7607 Tm -.02 Tc [(and hackers or other unauthorized par)-24.4(ties cannot)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.9687 422.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 410.7607 Tm -.02 Tc [(ea)7.3(vesdr)9.8(op on the communications)]TJ ET EMC /P <>BDC BT 9 0 0 9 493.6516 410.7607 Tm 0 Tc (.)Tj ET EMC /P <>BDC BT 9 0 0 9 495.9751 410.7607 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 386.7607 Tm -.025 Tc [(Clearly, pr)9.8(otecting the chain of trust \()]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 499.2681 386.7607 Tm (gure 3)Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 528.8947 386.7607 Tm (\) and the)Tj ET EMC /P <>BDC BT 9 0 0 9 562.0571 386.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 374.7607 Tm -.025 Tc [(crypt)9.8(ogr)19.5(aphic signing keys is critical in any IoT)]TJ ET EMC /P <>BDC BT 9 0 0 9 535.3311 374.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 362.7607 Tm -.025 Tc [(system. )19.5(The priv)7.3(ate keys of IoT)19.5( de)6.4(vices can usually be)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.6912 362.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 350.7607 Tm -.025 Tc [(pr)9.8(otected within the encla)7.3(ve of the machine contr)9.8(ol)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.0281 350.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 338.7607 Tm -.025 Tc (unit.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 377.296 342.5356 Tm -.0417 Tc (27)Tj ET EMC /P <>BDC BT 9 0 0 9 382.9106 338.7607 Tm -.025 Tc [( Manufacturers can centr)19.5(ally gener)19.5(ate)]TJ ET EMC /P <>BDC BT 9 0 0 9 525.6848 338.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.0007 326.7607 Tm -.025 Tc [(crypt)9.8(ogr)19.5(aphic keys before loading them int)9.8(o de)6.3(vices)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.4031 326.7607 Tm 0 Tc ( )Tj ET EMC /Figure <>BDC Q .019608 .65098 .015686 0 k /GS1 gs 145.003 297.631 421.927 14.75 re f .05098 .14902 .070588 0 k 145.003 78.107 421.927 218.232 re f q 1 i 144.966 312.381 422 -234.274 re W n 0 0 0 0 K 0 J 0 j 1.991 w 10 M [] 0 d q 1 0 0 1 145.003 297.631 cm 0 0 m 421.997 0 l S 1 0 0 1 -.0371 -.2227 cm 0 0 m 421.997 0 l S Q Q BT /F8 1 Tf 9 0 0 9 287.347 302.2568 Tm 0 0 0 0 k 0 Tc 0 Tw [(Figur)9.5(e).1( 3Pr)17.6(otecting the Chain of )27.6(T)31.4(r).2(ust)]TJ ET .24314 .96078 .39216 .12941 k 1 i q 1 0 0 1 500.841 88.613 cm 0 0 m -102.561 0 l -104.211 0 -105.561 1.35 -105.561 3 c -105.561 191.575 l -105.561 193.225 -104.211 194.575 -102.561 194.575 c 0 194.575 l 1.65 194.575 3 193.225 3 191.575 c 3 3 l 3 1.35 1.65 0 0 0 c f Q .72644 .20102 0 0 k q 1 0 0 1 442.255 246.305 cm 0 0 m 3.215 0 l 3.215 7.0683 l 9.646 7.0683 l 9.646 0 l 12.861 0 l 6.43 -6.4307 l 0 0 l f Q q 1 0 0 1 442.255 215.879 cm 0 0 m 3.215 0 l 3.215 7.0684 l 9.646 7.0684 l 9.646 0 l 12.861 0 l 6.43 -6.4311 l 0 0 l f Q q 1 0 0 1 442.255 187.269 cm 0 0 m 3.215 0 l 3.215 7.069 l 9.646 7.069 l 9.646 0 l 12.861 0 l 6.43 -6.43 l 0 0 l f Q q 1 0 0 1 442.255 156.493 cm 0 0 m 3.215 0 l 3.215 7.069 l 9.646 7.069 l 9.646 0 l 12.861 0 l 6.43 -6.43 l 0 0 l f Q q 1 0 0 1 442.255 125.718 cm 0 0 m 3.215 0 l 3.215 7.068 l 9.646 7.068 l 9.646 0 l 12.861 0 l 6.43 -6.431 l 0 0 l f Q .36322 .10051 0 0 k q 1 0 0 1 239.397 255.176 cm 0 0 m 144.648 0 l 144.648 22.916 l 176.818 -68.745 l 144.648 -160.406 l 144.648 -137.492 l 0 -137.492 l 0 0 l f* Q .035156 .023438 .023438 0 k 404.466 252.707 86.849 16.284 re f 404.466 222.644 86.849 16.284 re f 404.466 192.999 86.849 16.284 re f 404.466 162.935 86.849 16.284 re f 404.466 132.455 86.849 16.284 re f 404.466 103.227 86.849 16.284 re f .72644 .20102 0 0 K 0 J 0 j 10 w 10 M [] 0 d q 1 0 0 1 520.543 269.958 cm 0 0 m 0 -179.049 l S Q .72644 .20102 0 0 k q 1 0 0 1 532.692 268.329 cm 0 0 m -24.297 0 l -12.149 12.146 l 0 0 l f Q .019608 .65098 .015686 0 k q 1 0 0 1 243.635 118.258 cm 0 0 m -85.859 0 l -87.51 0 -88.859 1.35 -88.859 3 c -88.859 67.147 l -88.859 68.797 -87.51 70.147 -85.859 70.147 c 0 70.147 l 1.6495 70.147 2.9995 68.797 2.9995 67.147 c 2.9995 3 l 2.9995 1.35 1.6495 0 0 0 c f Q q 1 0 0 1 243.635 195.504 cm 0 0 m -85.859 0 l -87.51 0 -88.859 1.35 -88.859 3 c -88.859 57.961 l -88.859 59.611 -87.51 60.961 -85.859 60.961 c 0 60.961 l 1.6495 60.961 2.9995 59.611 2.9995 57.961 c 2.9995 3 l 2.9995 1.35 1.6495 0 0 0 c f Q 0 0 0 0 k q 1 0 0 1 230.594 215.638 cm 0 0 m -1.7065 4.5728 -6.6709 8.002 -12.256 8.002 c -13.808 8.002 -15.514 7.5732 -16.91 7.1445 c -19.547 12.574 -25.443 16.289 -32.114 16.289 c -38.629 16.289 -44.37 12.86 -47.007 7.8589 c -48.093 8.1445 -49.334 8.2876 -50.42 8.2876 c -58.487 8.2876 -64.383 2.2861 -65.003 -5.1439 c -65.158 -8.4299 -63.297 -12.574 -60.659 -15.432 c -58.798 -17.432 -55.85 -18.575 -53.058 -18.575 c -43.284 -18.575 -43.284 -18.575 y -43.439 -18.146 -43.439 -17.575 -43.439 -17.003 c -43.439 -9.5729 -36.768 -3.5719 -28.701 -3.5719 c -20.633 -3.5719 -14.118 -9.5729 -14.118 -17.003 c -14.118 -17.575 -14.118 -18.146 -14.118 -18.575 c -2.7924 -18.575 -2.7924 -18.575 y -1.8618 -18.575 -1.8618 -18.575 y 3.4131 -18.146 7.4468 -14.146 7.4468 -9.1449 c 7.4468 -4.8579 4.3438 -1.1431 0 0 c f* Q .72644 .20102 0 0 k 160.555 234.281 57.505 20.494 re f 0 0 0 0 k 199.57 236.233 3.6616 16.59 re f 205.376 236.233 3.6616 16.59 re f 211.181 236.233 3.6616 16.59 re f .72644 .20102 0 0 k 172.748 196.431 57.505 20.494 re f 0 0 0 0 k 211.763 198.383 3.6616 16.59 re f 217.569 198.383 3.6616 16.59 re f 223.374 198.383 3.6616 16.59 re f q 1 0 0 1 220.662 170.321 cm 0 0 m 0 2.033 1.648 3.681 3.6807 3.681 c 18.402 3.681 l 20.436 3.681 22.083 2.033 22.083 0 c 22.083 -42.349 l 22.083 -44.381 20.436 -46.029 18.402 -46.029 c 3.6807 -46.029 l 1.648 -46.029 0 -44.381 0 -42.349 c 0 0 l f Q q 1 0 0 1 158.772 171.44 cm 0 0 m 0 1.415 1.147 2.562 2.5615 2.562 c 56.084 2.562 l 57.499 2.562 58.646 1.415 58.646 0 c 58.646 -10.246 l 58.646 -11.66 57.499 -12.807 56.084 -12.807 c 2.5615 -12.807 l 1.147 -12.807 0 -11.66 0 -10.246 c 0 0 l f Q q 1 0 0 1 158.772 137.099 cm 0 0 m 0 1.415 1.147 2.562 2.5615 2.562 c 56.084 2.562 l 57.499 2.562 58.646 1.415 58.646 0 c 58.646 -10.246 l 58.646 -11.66 57.499 -12.807 56.084 -12.807 c 2.5615 -12.807 l 1.147 -12.807 0 -11.66 0 -10.246 c 0 0 l f Q q 1 0 0 1 158.772 154.27 cm 0 0 m 0 1.414 1.147 2.561 2.5615 2.561 c 56.084 2.561 l 57.499 2.561 58.646 1.414 58.646 0 c 58.646 -10.246 l 58.646 -11.661 57.499 -12.808 56.084 -12.808 c 2.5615 -12.808 l 1.147 -12.808 0 -11.661 0 -10.246 c 0 0 l f Q BT 7 0 0 7 171.8825 246.8627 Tm .0002 Tc (HSM)Tj -1.0652 -1 TD -.0003 Tc (\(Physical\))Tj 2.8125 -4.5592 TD .0002 Tc (HSM)Tj -.521 -1 TD -.0002 Tc (\(Cloud\))Tj -.8353 -3.1637 TD -.0001 Tc .0001 Tw [(Lif)11.9(e).3( Cy)6(cle Manager)]TJ /F9 1 Tf 0 0 0 1 k -1.123 -1.5486 TD .0002 Tc -.0006 Tw [(De)5.8(vice Identities)]TJ .6807 -1 TD .0001 Tc 0 Tw (Management)Tj -.1376 -2.0443 TD -.0005 Tw [(Smar)-25.3(t IoT)19.4( PKI)]TJ 1.77 -2.5031 TD .0003 Tc 0 Tw (HSM)Tj 0 -7 7 0 234.1496 161.2743 Tm 0 Tc (Business)Tj -.9726 -1 TD [(Micr)9.3(oser)-9.4(vices)]TJ /F10 1 Tf 7 0 0 7 254.986 223.8969 Tm .72644 .20102 0 0 k ()Tj /F9 1 Tf 0 0 0 1 k .5 0 TD ( )Tj /F8 1 Tf .229 0 TD .0004 Tc (HSM )Tj /F9 1 Tf 2.1426 0 TD -.0001 Tc -.0003 Tw [(\(on-pr)8.7(em or cloud based\) t)6.9(o).5( pr)9(otect Root)]TJ -2.8716 -1.4286 TD 0 Tc [( )-508.2(of )19.5(T)36.8(r)-.4(ust for PKI, SSL and Code Signing)]TJ /F10 1 Tf .72644 .20102 0 0 k 0 -2.2857 TD 0 Tw ()Tj /F9 1 Tf 0 0 0 1 k .5 0 TD ( )Tj /F8 1 Tf .229 0 TD -.0001 Tc .0001 Tw [(User A)5.1(u).5(thentication)]TJ /F10 1 Tf .72644 .20102 0 0 k -.729 -2.2857 TD 0 Tc 0 Tw ()Tj /F9 1 Tf 0 0 0 1 k .5 0 TD ( )Tj /F8 1 Tf .229 0 TD [(Data Pr)18.9(otection)]TJ /F9 1 Tf 6.2187 0 TD -.0004 Tw [( \(encr)-9.3(y)-.1(ption and t)8.7(o).6(k)9.7(e)-.9(nisation\))]TJ -6.9477 -1.4286 TD -.0002 Tc -.0002 Tw [( )-508.2(utilizing cr)-9.6(ypt)9.8(o).3(gr)18.7(aphic k)9.4(e)5.2(ys st)9.8(or)8.5(ed)]TJ T* -.0001 Tc -.0003 Tw [( )-508.2(or deriv)6(e)-.9(d at de)5.5(vices)]TJ /F10 1 Tf .72644 .20102 0 0 k 0 -2.2857 TD 0 Tc 0 Tw ()Tj /F9 1 Tf 0 0 0 1 k .5 0 TD ( )Tj /F8 1 Tf .229 0 TD -.0002 Tc .0002 Tw [(De)6.9(vice and PKI Lif)11.2(e).6( Cy)6.1(cle Management)]TJ 0 -9 9 0 548.934 221.5161 Tm 0 Tc 0 Tw [(Le)6.7(v)6(e).4(l of impor)-24.4(tance)]TJ /F9 1 Tf 0 -8 8 0 540.934 253.7465 Tm -.0001 Tc -.0001 Tw [(Compr)9.8(omising any la)7.4(y)6.2(e).1(r her)9.3(e will aff)10.9(e).1(ct the)]TJ 1.7843 -1.25 TD -.0002 Tc 0 Tw [(trust of all la)7.4(y)6.2(e).1(rs underneath this.)]TJ 0 -7 7 0 530.934 133.5153 Tm 0 Tc ( )Tj /F8 1 Tf 10 0 0 10 419.924 273.6005 Tm 0 0 0 0 k [(Chain of )28.8(T)31.8(r).5(ust)]TJ 8 0 0 8 427.24 258.1518 Tm 0 0 0 1 k -.0002 Tc .0002 Tw [(Root of )29.9(T)32.1(r)-.2(ust)]TJ .6509 -3.6536 TD 0 Tc 0 Tw [(Bootstr)14.7(a)-.3(p)]TJ .1011 -3.7579 TD .0003 Tc [(Firmwar)11(e)]TJ -1.3855 -3.81 TD .0002 Tc [(OS/A)23.2(pplications)]TJ -.1225 -3.7057 TD .0003 Tc (Communications)Tj 2.4537 -3.7579 TD (Data)Tj ET EMC endstream endobj 266 0 obj <>/ExtGState<>>> endobj 292 0 obj <> endobj 297 0 obj <> endobj 302 0 obj <> endobj 307 0 obj <> endobj 312 0 obj <> endobj 317 0 obj <> endobj 322 0 obj <> endobj 327 0 obj <> endobj 332 0 obj <> endobj 337 0 obj <> endobj 342 0 obj <> endobj 347 0 obj <> endobj 352 0 obj <> endobj 353 0 obj <> endobj 375 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 490.9954 20.9379 Tm 0 0 0 1 k 0 Tc 0 Tw (ISACA )Tj ET EMC /P <>BDC BT 7 0 0 7 512.4738 20.9379 Tm (JOURNAL)Tj ET EMC /P <>BDC /GS1 gs BT 7 0 0 7 543.321 20.9379 Tm 0 .65 0 0 k [( V)6.4(OL 3)]TJ ET EMC /Artifact <>BDC 0 0 0 1 k /GS2 gs 572.364 0 .51599 31.289 re f EMC /P <>BDC /GS1 gs BT 7 0 0 7 587.3827 20.9379 Tm 0 .65 0 0 k (5)Tj ET EMC /P <>BDC /GS2 gs BT 7 0 0 7 36.4479 20.9379 Tm 0 0 0 1 k [( 2020 ISACA. All rights reser)-8.8(ved. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 144.0797 20.9379 Tm [(www)60.6(.isaca.org)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 35 662.7607 Tm -.025 Tc [(as par)-24.4(t of the de)6.4(vice pr)9.8(o)7.3(visioning pr)9.8(ocess. )19.5(The)]TJ ET EMC /P <>BDC BT 9 0 0 9 210.369 662.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 650.7607 Tm -.025 Tc (equipment deployed for this task should follow)Tj ET EMC /P <>BDC BT 9 0 0 9 211.5081 650.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 638.7607 Tm -.025 Tc [(industry standards, such as using US Feder)19.5(al)]TJ ET EMC /P <>BDC BT 9 0 0 9 203.8016 638.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 626.7607 Tm -.025 Tc [(Information Pr)9.8(ocessing Standards \(FIPS\)-cer)-24.4(tied)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.0332 626.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 614.7607 Tm -.025 Tc (hardware security modules \(HSMs\).)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 170.6934 618.5356 Tm -.0417 Tc (28)Tj ET EMC /P <>BDC BT 9 0 0 9 176.3081 614.7607 Tm -.025 Tc [( F)10.3(or ease of)]TJ ET EMC /P <>BDC BT 9 0 0 9 220.6829 614.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 602.7607 Tm -.025 Tc [(deployment and t)9.8(o)0( cater t)9.8(o)0( sudden increases in)]TJ ET EMC /P <>BDC BT 9 0 0 9 213.802 602.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 590.7607 Tm -.025 Tc [(usage, IoT)19.5( manufacturers may explore the on-demand)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.1859 590.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 578.7607 Tm -.025 Tc [(ser)-8.8(vices offered by trusted ser)-8.8(vice pr)9.8(o)7.3(viders.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 203.778 582.5356 Tm -.0417 Tc (29)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 209.3927 582.5356 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS1 gs BT /F4 1 Tf 11 0 0 11 35 440.7607 Tm .29 1 .45 .09 k -.005 Tc (Conclusion)Tj ET EMC /P <>BDC BT 11 0 0 11 89.7886 440.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 35 422.7607 Tm 0 0 0 1 k -.005 Tc [(Manufacturers can demonstr)19.5(ate due care and win)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.6427 422.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 410.7607 Tm -.005 Tc [(cust)9.8(omer trust by following the security design)]TJ ET EMC /P <>BDC BT 9 0 0 9 219.6666 410.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 398.7607 Tm -.005 Tc [(described pre)6.4(viously. Security at the IoT)19.5( de)6.4(vice le)6.4(vel)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.8786 398.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 386.7607 Tm -.005 Tc [(is attainable, and pre)6.4(vention is the best option. By)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.3753 386.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 374.7607 Tm -.005 Tc [(pr)9.8(otecting the chain of trust, IoT)19.5( can defend itself,)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.8005 374.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 362.7607 Tm -.005 Tc [(and manufacturers and oper)19.5(at)9.8(ors can minimize)]TJ ET EMC /P <>BDC BT 9 0 0 9 222.3591 362.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 350.7607 Tm -.005 Tc [(losses fr)9.8(om counter)-7.3(feits, attain regulat)9.8(ory)]TJ ET EMC /P <>BDC BT 9 0 0 9 200.1151 350.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 338.7607 Tm -.005 Tc (compliance, minimize misuse and facilitate future)Tj ET EMC /P <>BDC BT 9 0 0 9 231.3628 338.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 326.7607 Tm -.005 Tc [(maintenance. Such pr)9.8(otection co)7.3(vers de)6.4(vice)]TJ ET EMC /P <>BDC BT 9 0 0 9 209.4896 326.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 314.7607 Tm -.005 Tc (hardware, rmware and application codes and the)Tj ET EMC /P <>BDC BT 9 0 0 9 231.9141 314.7607 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 302.7606 Tm -.005 Tc [(data they pr)9.8(ocess. Finally, cybersecurity and priv)7.3(acy)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.1105 302.7606 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 290.7606 Tm -.005 Tc [(risk fact)9.8(ors should be assessed and mitigated)]TJ ET EMC /P <>BDC BT 9 0 0 9 216.8782 290.7606 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 278.7606 Tm -.005 Tc [(thr)9.8(oughout the pr)9.8(oduct life cycle.)]TJ ET EMC /P <>BDC BT 9 0 0 9 165.1263 278.7606 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS1 gs BT /F4 1 Tf 11 0 0 11 35 252.7607 Tm .29 1 .45 .09 k -.005 Tc (Endnotes)Tj ET EMC /P <>BDC BT 11 0 0 11 80.8052 252.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 52.3635 234.7607 Tm 0 0 0 1 k -.005 Tc [(PricewaterhouseCoopers \(PWC)12.7(\), 2019 IoT)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 221.7279 234.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 39.9999 234.7607 Tm .29 1 .45 .09 k (1)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 52 222.7607 Tm 0 0 0 1 k -.005 Tc [(Sur)-8.8(vey: Speed Oper)19.5(ations, Strengthen)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 200.1946 222.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 52 210.7607 Tm -.005 Tc [(Relationships and Drive What)54.7(s Next,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 198.0667 210.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 52 198.7607 Tm -.005 Tc [(https:/)109.4(/www)60.6(.pwc.com/us/en/ser)-8.8(vices/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 202.5116 198.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 52 186.7607 Tm -.005 Tc (consulting/technology/emerging-technology/)Tj ET EMC /LBody <>BDC BT 9 0 0 9 227.7816 186.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 52 174.7607 Tm -.005 Tc [(iot-po)7.3(v)52.3(.html#about-sur)-8.8(vey)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 153.0307 174.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 52.3635 162.7607 Tm -.005 Tc [(A)63(T&T)106.5(, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 76.7691 162.7607 Tm [(A)63(T&T)19.6( Cybersecurity Insights Repor)-24.4(t,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 215.3449 162.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 39.9999 162.7607 Tm .29 1 .45 .09 k (2)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 52 150.7607 Tm 0 0 0 1 k -.02 Tc (2019/2020 Edition)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 121.4502 150.7607 Tm (, )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 125.0849 150.7607 Tm [(https:/)109.4(/cybersecurity.att.com/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 236.8305 150.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 52 138.7607 Tm -.005 Tc [(resour)9.3(ce-center/analyst-repor)-24.4(ts/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 178.248 138.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 52 126.7607 Tm -.005 Tc [(cybersecurity-insights-repor)-24.4(t-ninth-edition)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 213.2565 126.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 52.3635 114.7607 Tm -.005 Tc [(Russo, M.; M. Alber)-24.4(t; How IoT)19.5( Data)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 192.0777 114.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 39.9999 114.7607 Tm .29 1 .45 .09 k (3)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 52 102.7607 Tm 0 0 0 1 k -.005 Tc [(E)9.3(cosystems Will )19.5(T)36.6(r)19.5(ansform B2B Competition)]TJ ET EMC /LBody <>BDC BT /F4 1 Tf 9 0 0 9 228.9868 102.7607 Tm 0 Tc (,)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 231.1391 102.7607 Tm ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 234.3064 102.7607 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 52 90.7607 Tm -.005 Tc (BCG Henderson Institute, )Tj ET EMC /LBody <>BDC BT 9 0 0 9 153.4834 90.7607 Tm -.02 Tc (27 July 2018,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 204.0582 90.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 52 78.7607 Tm -.02 Tc [(https:/)109.4(/www)60.6(.bcg.com/publications/2018/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 208.2244 78.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 52 66.7607 Tm -.02 Tc (how-internet-of-things-iot-data-ecosystems-)Tj ET EMC /LBody <>BDC BT 9 0 0 9 215.1687 66.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 52 54.7607 Tm -.005 Tc [(tr)19.5(ansform-b2b-competition.aspx)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 177.0373 54.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 270.8636 662.7607 Tm -.005 Tc [(Hilt)9.8(on, S.; Dyn Analysis Summary of F)12.7(riday)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 440.2105 662.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 258.5 662.7607 Tm .29 1 .45 .09 k (4)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 270.5 650.7607 Tm 0 0 0 1 k -.005 Tc [(Oct)9.8(ober 21 A)8.3(ttack,)83( Dyn, 26 Oct)9.8(ober 2016,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 434.6812 650.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 270.5 638.7607 Tm -.005 Tc [(https:/)109.4(/dyn.com/blog/dyn-analysis-summary-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 445.3852 638.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 626.7607 Tm -.005 Tc [(of-friday-oct)9.8(ober-21-attack/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 377.3987 626.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 270.8636 614.7607 Tm -.005 Tc [(Schiffer)60.1(, A.; How a Fish )19.5(T)55.2(ank Helped Hack )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 440.4874 614.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 258.5 614.7607 Tm .29 1 .45 .09 k (5)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 270.5 602.7607 Tm 0 0 0 1 k -.005 Tc [(a Casino,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 311.2655 602.7607 Tm (The)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 325.9005 602.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 328.0836 602.7607 Tm -.005 Tc [(W)16.1(ashingt)9.8(on P)6.4(ost)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 394.0608 602.7607 Tm (, 21 July 2017,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 450.2952 602.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 270.5 590.7607 Tm -.005 Tc [(https:/)109.4(/www)60.6(.washingt)9.8(onpost.com/news/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 429.5798 590.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 578.7607 Tm -.005 Tc [(inno)7.3(v)7.3(ations/wp/2017/07/21/how-a-sh-tank-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 270.5 566.7607 Tm -.02 Tc (helped-hack-a-casino/?utm_term=.09f1f239b5dc)Tj ET EMC /LBody <>BDC BT 9 0 0 9 453.6992 566.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 270.8636 554.7607 Tm -.005 Tc [(Greenberg, A.; The Jeep Hackers Are Back t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 450.2861 554.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 258.5 554.7607 Tm .29 1 .45 .09 k (6)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 270.5 542.7607 Tm 0 0 0 1 k -.005 Tc [(Pr)9.8(o)7.3(ve Car Hacking Can Get Much W)15.2(orse,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 433.2825 542.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 270.5 530.7607 Tm -.005 Tc (Wired)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 292.8542 530.7607 Tm [(, 1 A)5.4(ugust 2016, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 358.1788 530.7607 Tm [(https:/)109.4(/www)60.6(.wired.com/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 452.1067 530.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 518.7607 Tm -.005 Tc (2016/08/jeep-hackers-return-high-speed-)Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 506.7607 Tm [(steering-acceler)19.5(ation-hacks/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 380.8747 506.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 270.8636 494.7607 Tm -.005 Tc [(F)12.7(renkel, S.; )58.6(A)0( Cute )19.5(T)48.4(oy Just Br)9.8(ought a Hacker)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 450.7543 494.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 258.5 494.7607 Tm .29 1 .45 .09 k (7)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 270.5 482.7607 Tm 0 0 0 1 k -.005 Tc [(Int)9.8(o Y)31.8(our Home,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 338.5141 482.7607 Tm [(The New Y)31.8(ork )19.5(Times)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 418.265 482.7607 Tm (, )Tj ET EMC /LBody <>BDC BT 9 0 0 9 422.1696 482.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 470.7607 Tm -.005 Tc (21 December 2017, )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 349.3631 470.7607 Tm [(https:/)109.4(/www)60.6(.nytimes.com/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 452.8031 470.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 458.7607 Tm -.005 Tc [(2017/12/21/technology/connected-t)9.8(oys-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 270.5 446.7607 Tm (hacking.html)Tj ET EMC /LBody <>BDC BT 9 0 0 9 320.6027 446.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 270.8636 434.7607 Tm -.005 Tc [(McKeefry, H. L.; Counter)-7.3(feits Costing)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 419.2538 434.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 258.5 434.7607 Tm .29 1 .45 .09 k (8)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 270.5 422.7607 Tm 0 0 0 1 k -.005 Tc [(Semiconduct)9.8(or Industry Billions,)83( EE)-9.7(T)19.5( Asia, )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 440.9446 422.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 410.7607 Tm -.005 Tc [(14 Mar)9.3(ch 2019, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 333.9811 410.7607 Tm [(https:/)109.4(/www)60.6(.eetasia.com/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 434.9469 410.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 398.7607 Tm -.005 Tc [(news/ar)-24.4(ticle/Counter)-7.3(feits-Costing-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 270.5 386.7607 Tm [(Semiconduct)9.8(or-Industry-Billions)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 393.7873 386.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 270.8636 374.7607 Tm -.005 Tc [(Go)7.3(vtr)19.5(ack, S. 734: Internet of )19.5(Things)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 411.9599 374.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 258.5 374.7607 Tm .29 1 .45 .09 k (9)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 270.5 362.7607 Tm 0 0 0 1 k -.005 Tc [(Cybersecurity Impr)9.8(o)7.3(vement Act of 2019,)83( )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 433.6537 362.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 350.7607 Tm -.005 Tc (23 September 2019, )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 352.0339 350.7607 Tm [(https:/)109.4(/www)60.6(.go)7.3(vtr)19.5(ack.us/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 450.3104 350.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 338.7607 Tm -.005 Tc (congress/bills/116/s734)Tj ET EMC /LBody <>BDC BT 9 0 0 9 366.7953 338.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 271.027 326.7607 Tm -.005 Tc [(Go)7.3(vinfo, Senate Committee on Homeland)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 437.6108 326.7607 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 253.5 326.7607 Tm .29 1 .45 .09 k (10)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 270.5 314.7607 Tm 0 0 0 1 k -.005 Tc [(Security and Go)7.3(vernmental Affairs Repor)-24.4(t )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 436.5005 314.7607 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 302.7606 Tm -.005 Tc [(on S.734,)83( 23 September 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 391.0119 302.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 270.5 290.7606 Tm -.005 Tc [(https:/)109.4(/www)60.6(.go)7.3(vinfo.go)7.3(v/content/pkg/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 419.9953 290.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 278.7606 Tm -.005 Tc [(CRPT)113.3(-116srpt112/pdf/CRPT)113.3(-116srpt112.pdf)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 441.2441 278.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 271.027 266.7606 Tm -.005 Tc [(California Senate, SB-327 Information Priv)7.3(acy:)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 455.4739 266.7606 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 253.5 266.7606 Tm .29 1 .45 .09 k (11)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 270.5 254.7606 Tm 0 0 0 1 k -.005 Tc [(Connected De)6.4(vices,)83( USA, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 373.5654 254.7606 Tm [(https:/)109.4(/leginfo.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 430.6733 254.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 242.7606 Tm -.005 Tc [(legislature.ca.go)7.3(v/faces/billTextClient.xhtml?)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 446.1061 242.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 230.7606 Tm -.005 Tc (bill_id=201720180SB327)Tj ET EMC /LBody <>BDC BT 9 0 0 9 366.9678 230.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 271.027 218.7606 Tm -.005 Tc [(US F)10.3(ood and Drug Administr)19.5(ation, Content of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 451.2232 218.7606 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 253.5 218.7606 Tm .29 1 .45 .09 k (12)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 270.5 206.7606 Tm 0 0 0 1 k -.005 Tc (Premarket Submissions for Management of)Tj ET EMC /LBody <>BDC BT 9 0 0 9 443.4282 206.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 194.7606 Tm -.03 Tc [(Cybersecurity in Medical De)6.4(vices,)83( 2 Oct)9.8(ober 2014,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 457.9713 194.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 270.5 182.7606 Tm -.005 Tc [(https:/)109.4(/www)60.6(.fda.go)7.3(v/media/86174/download)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 446.6088 182.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 271.027 170.7606 Tm -.005 Tc [(US F)10.3(ood and Drug Administr)19.5(ation, P)6.4(ostmarket)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 455.6002 170.7606 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 253.5 170.7606 Tm .29 1 .45 .09 k (13)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 270.5 158.7606 Tm 0 0 0 1 k -.005 Tc (Management of Cybersecurity in Medical)Tj ET EMC /LBody <>BDC BT 9 0 0 9 432.2672 158.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 146.7606 Tm -.005 Tc [(De)6.4(vices,)83( Guidance for Industry and F)10.3(ood and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 448.8239 146.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 270.5 134.7606 Tm -.005 Tc [(Drug Administr)19.5(ation Staff, 28 December 2016,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 451.5354 134.7606 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 270.5 122.7606 Tm -.005 Tc [(https:/)109.4(/www)60.6(.fda.go)7.3(v/media/95862/download)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 446.6088 122.7606 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC 0 .65 0 0 k /GS1 gs 472 469.597 131 202.594 re f EMC /Figure <>BDC Q q 1 i 415.59 470.79 272.018 -172.676 re W n 472 469.596 149.587 -128 re W* n 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n /GS1 gs q 133.964 0 0 130.49 470.73 340.3 cm /Im4 Do Q EMC /P <>BDC Q q 1 i 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n /GS1 gs BT /F4 1 Tf 13 0 0 13 481.1021 658.5693 Tm 0 0 0 0 k 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 13 0 0 13 481.1021 645.5693 Tm (Enjoying)Tj ET EMC /P <>BDC BT 13 0 0 13 531.0962 645.5693 Tm ( )Tj ET EMC /P <>BDC BT 13 0 0 13 481.1021 632.5693 Tm [(this ar)-24.4(ticle?)]TJ ET EMC /P <>BDC BT 13 0 0 13 549.7266 632.5693 Tm ( )Tj ET EMC /P <>BDC BT /F12 1 Tf 13 0 0 13 481.1021 619.5693 Tm ( )Tj ET EMC /P <>BDC BT /F3 1 Tf 10 0 0 10 481.1021 607.5693 Tm ()Tj ET EMC /P <>BDC BT /F11 1 Tf 10 0 0 10 487.4924 607.5693 Tm -.02 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 492.073 607.5693 Tm 0 Tc (Read )Tj ET EMC /P <>BDC BT /F13 1 Tf 10 0 0 10 517.2244 607.5693 Tm (Assessing)Tj ET EMC /P <>BDC BT 10 0 0 10 562.7126 607.5693 Tm ( )Tj ET EMC /P <>BDC BT 10 0 0 10 491.9771 595.5693 Tm (IoT)Tj ET EMC /P <>BDC BT /F11 1 Tf 10 0 0 10 506.2739 595.5693 Tm (.)Tj ET EMC /P <>BDC /GS2 gs BT 10 0 0 10 509.0668 595.5693 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC /GS1 gs BT /F3 1 Tf 10 0 0 10 481.1021 583.5693 Tm 0 0 0 0 k ()Tj ET EMC /P <>BDC BT /F11 1 Tf 10 0 0 10 487.4924 583.5693 Tm -.02 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 492.073 583.5693 Tm 0 Tc (Learn more)Tj ET EMC /P <>BDC BT 10 0 0 10 543.1033 583.5693 Tm ( )Tj ET EMC /P <>BDC BT 10 0 0 10 491.9771 571.5693 Tm (about, discuss)Tj ET EMC /P <>BDC BT 10 0 0 10 556.7524 571.5693 Tm ( )Tj ET EMC /P <>BDC BT 10 0 0 10 491.9771 559.5693 Tm [(and collabor)14.7(ate)]TJ ET EMC /P <>BDC BT 10 0 0 10 561.3228 559.5693 Tm ( )Tj ET EMC /P <>BDC BT 10 0 0 10 491.9771 547.5693 Tm (on information)Tj ET EMC /P <>BDC BT 10 0 0 10 557.8364 547.5693 Tm ( )Tj ET EMC /P <>BDC BT 10 0 0 10 491.9771 535.5693 Tm -.02 Tc (and cybersecurity)Tj ET EMC /P <>BDC BT 10 0 0 10 567.8794 535.5693 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 491.9771 523.5693 Tm [(in ISACA)58.6()113.3(s)0( Online)]TJ ET EMC /P <>BDC BT 10 0 0 10 567.8803 523.5693 Tm ( )Tj ET EMC /P <>BDC BT 10 0 0 10 491.9771 511.5693 Tm [(F)10.3(orums. )]TJ ET EMC /P <>BDC BT 10 0 0 10 531.2788 511.5693 Tm ( )Tj ET EMC /P <>BDC BT /F13 1 Tf 10 0 0 10 491.9771 499.5693 Tm [(https:/)121.1(/engage.)]TJ ET EMC /P <>BDC BT 10 0 0 10 558.8129 499.5693 Tm ( )Tj ET EMC /P <>BDC BT 10 0 0 10 491.9771 487.5693 Tm (isaca.org/online)Tj ET EMC /P <>BDC BT 10 0 0 10 563.2612 487.5693 Tm ( )Tj ET EMC /P <>BDC BT 10 0 0 10 491.9771 475.5693 Tm (forums)Tj ET EMC /P <>BDC BT /F11 1 Tf 10 0 0 10 523.4761 475.5693 Tm ( )Tj ET EMC /Artifact <>BDC 0 .65 0 0 k 36.448 457 205.5 110.501 re f EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 41.3105 522.8575 Tm .73 .19 0 0 k ()Tj ET EMC /P <>BDC BT /F1 1 Tf 14 0 0 14 55.2177 542.8577 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [( PRO)13.2(TEC)14.1(TING)17.5( )19.6(THE)17.5( CH)-8.8(AIN)]TJ ET EMC /P <>BDC BT 14 0 0 14 226.4238 542.8577 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.5565 524.8577 Tm .0351 Tc -.0371 Tw [(OF)17.5( TRUST)37.1( )-19.6(AND)17.5( THE)]TJ ET EMC /P <>BDC BT 14 0 0 14 171.9453 524.8577 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.5565 506.8577 Tm .0351 Tc -.0175 Tw [(CR)23.4(YPT)13.6(OGRAPHIC)17.5( SIGNING)]TJ ET EMC /P <>BDC BT 14 0 0 14 221.0273 506.8577 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.5565 488.8577 Tm .0351 Tc -.0175 Tw [(KEY)7.8(S)17.5( IS)17.5( CRITICAL)17.5( IN)17.5( ANY)17.5( )]TJ ET EMC /P <>BDC BT 14 0 0 14 214.2322 488.8577 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 41.5565 470.8577 Tm .0351 Tc -.0175 Tw [(IO)13.2(T)37.1( SY)7.8(STEM)17.6(.)35.1( )]TJ ET EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 131.1279 450.8575 Tm .73 .19 0 0 k 0 Tc 0 Tw ()Tj ET EMC Q endstream endobj 376 0 obj <>/XObject<>/ExtGState<>>> endobj 392 0 obj <> endobj 397 0 obj <> endobj 402 0 obj <> endobj 407 0 obj <> endobj 412 0 obj <> endobj 417 0 obj <> endobj 422 0 obj <> endobj 427 0 obj <> endobj 432 0 obj <> endobj 437 0 obj <> endobj 442 0 obj <> endobj 447 0 obj <> endobj 452 0 obj <> endobj 457 0 obj <> endobj 462 0 obj <> endobj 467 0 obj <> endobj 472 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.56 391.68 m W n .12 783.12 603.12 -783.12 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 39.4019 20.9698 Tm 0 0 0 1 k 0 Tc 0 Tw (ISACA )Tj ET EMC /P <>BDC BT 7 0 0 7 60.8804 20.9698 Tm (JOURNAL)Tj ET EMC /P <>BDC /GS1 gs BT 7 0 0 7 91.7275 20.9698 Tm 0 .65 0 0 k [( V)6.4(OL 3)]TJ ET EMC /Artifact <>BDC 0 0 0 1 k /GS2 gs 30.069 0 .51505 31.531 re f EMC /P <>BDC /GS1 gs BT 7 0 0 7 12.8637 20.9698 Tm 0 .65 0 0 k (6)Tj ET EMC /LBody <>BDC /GS2 gs BT 9 0 0 9 161.4743 640.8257 Tm 0 0 0 1 k -.005 Tc [(Ofcial Journal of the E)8.3(u)0(r)9.8(opean Union,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 312.8705 640.8257 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 143.9471 640.8257 Tm .29 1 .45 .09 k (14)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 160.9471 628.8258 Tm 0 0 0 1 k -.005 Tc [(Regulation \(EU\) 2019/881 of the E)8.3(u)0(r)9.8(opean)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 327.8451 628.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 616.8258 Tm -.005 Tc [(P)5.4(arliament and of the Council of 17 April 2019)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 342.8682 616.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 604.8258 Tm -.005 Tc [(on ENISA \(the E)8.3(u)0(r)9.8(opean Union Agency for)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 325.3721 604.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 592.8258 Tm -.005 Tc (Cybersecurity\) and on Information and)Tj ET EMC /LBody <>BDC BT 9 0 0 9 312.5069 592.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 580.8258 Tm -.005 Tc -.0195 Tw [(Communications Technology )-19.5(Cybersecurity)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 332.8384 580.8258 Tm 0 Tc 0 Tw ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 568.8258 Tm -.005 Tc [(Cer)-24.4(tication and Repealing Regulation \(EU\) )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 333.1022 568.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 556.8258 Tm -.005 Tc (No 526/2013 \(Cybersecurity Act\), 17 April 2019,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 349.2392 556.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 160.9471 544.8258 Tm -.005 Tc [(https:/)109.4(/eur-lex.eur)9.8(opa.eu/legal-content/EN/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 328.3782 544.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 532.8258 Tm -.005 Tc [(TXT/PDF/?uri=CELEX:32019R0881&fr)9.8(om=EN)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 336.1759 532.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 161.4743 520.8258 Tm -.005 Tc [(Depar)-24.4(tment of Digital, Culture, Media and )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 325.9004 520.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 143.9471 520.8258 Tm .29 1 .45 .09 k (15)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 160.9471 508.8258 Tm 0 0 0 1 k -.005 Tc [(Spor)-24.4(t in the UK, UK Code of Pr)19.5(actice for)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 319.5253 508.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 496.8258 Tm -.005 Tc [(Consumer IoT)19.5( Security,)83( 14 Oct)9.8(ober 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 324.5976 496.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 160.9471 484.8258 Tm -.005 Tc [(https:/)109.4(/www)60.6(.go)7.3(v)52.3(.uk/go)7.3(vernment/publications/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 340.2917 484.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 472.8258 Tm -.005 Tc [(code-of-pr)19.5(actice-for-consumer-iot-security/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 327.5959 472.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 460.8258 Tm -.005 Tc [(code-of-pr)19.5(actice-for-consumer-iot-security)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 323.9978 460.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 161.4743 448.8258 Tm -.005 Tc [(US Depar)-24.4(tment of Homeland Security,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 310.9268 448.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 143.9471 448.8258 Tm .29 1 .45 .09 k (16)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 160.9471 436.8258 Tm 0 0 0 1 k -.005 Tc [(Str)19.5(ategic Principles for Securing the Internet )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 340.2777 436.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 424.8258 Tm -.005 Tc [(of )19.5(Things Version 1.0,)83( 15 No)7.3(vember 2016,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 328.3407 424.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 160.9471 412.8258 Tm -.005 Tc [(https:/)109.4(/www)60.6(.dhs.go)7.3(v/sites/default/les/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 317.3257 412.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 400.8258 Tm -.005 Tc [(publications/Str)19.5(ategic_Principles_for_Securing_)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 345.4687 400.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 388.8258 Tm -.005 Tc (the_Internet_of_Things-2016-1115-FINAL....pdf)Tj ET EMC /LBody <>BDC BT 9 0 0 9 341.586 388.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 161.4743 376.8258 Tm -.005 Tc [(National Institute of Standards and )19.5(Technology,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 349.0896 376.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 143.9471 376.8258 Tm .29 1 .45 .09 k (17)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 160.9471 364.8258 Tm 0 0 0 1 k -.005 Tc [(F)12.7(r)19.5(amework for Impr)9.8(o)7.3(ving Critical Infr)19.5(astructure)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 349.2559 364.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 352.8258 Tm -.005 Tc [(Cybersecurity Version 1.1,)83( USA, 16 April 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 343.0957 352.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 160.9471 340.8258 Tm -.005 Tc [(https:/)109.4(/nvlpubs.nist.go)7.3(v/nistpubs/CSWP/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 320.6523 340.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 328.8258 Tm -.005 Tc [(NIST)106.5(.CSWP)158.2(.04162018.pdf)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 260.623 328.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 161.4743 316.8258 Tm -.005 Tc [(National Institute of Standards and )19.5(Technology,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 349.0896 316.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 143.9471 316.8258 Tm .29 1 .45 .09 k (18)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 160.9471 304.8258 Tm 0 0 0 1 k -.005 Tc [(Security and Priv)7.3(acy Contr)9.8(ols for Feder)19.5(al)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 324.2397 304.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 292.8258 Tm -.005 Tc (Information Systems and Organizations)Tj ET EMC /LBody <>BDC BT 9 0 0 9 317.6485 292.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 280.8258 Tm -.005 Tc [(Re)6.4(vision 4,)83( Special Publication \(SP\) 800-53,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 333.8253 280.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 268.8258 Tm -.005 Tc (USA, April 2013,)Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 223.8119 268.8258 Tm [( http:/)109.4(/dx.doi.org/10.6028/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 327.3059 268.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 256.8258 Tm -.005 Tc [(NIST)106.5(.SP)158.2(.800-53r4)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 227.6044 256.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 161.4743 244.8258 Tm -.005 Tc [(Gr)9.8(oupe Speciale Mobile Association \(GSMA\),)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 339.0401 244.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 143.9471 244.8258 Tm .29 1 .45 .09 k (19)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 160.9471 232.8258 Tm 0 0 0 1 k -.005 Tc [(CLP)158.2(.11IoT)19.5( Security Guidelines Over)-8.8(view)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 326.83 232.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 220.8258 Tm -.005 Tc [(Document Version 1.0,)83( 8 February 2016,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 320.8061 220.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 160.9471 208.8258 Tm -.02 Tc [(https:/)109.4(/www)60.6(.gsma.com/iot/wp-content/uploads/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 344.6429 208.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 196.8258 Tm -.005 Tc [(2016/02/CLP)158.2(.11-v1.1.pdf)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 258.0117 196.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 161.4743 184.8258 Tm -.005 Tc [(International Society of A)5.4(u)0(t)9.8(omation \(ISA\), )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 327.0068 184.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 143.9471 184.8258 Tm .29 1 .45 .09 k (20)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 160.9471 172.8258 Tm 0 0 0 1 k -.005 Tc (New ISA/IEC 62443 Standard Species)Tj ET EMC /LBody <>BDC BT 9 0 0 9 318.1022 172.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 160.8258 Tm -.005 Tc [(Security Capabilities for Contr)9.8(ol System)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 317.4081 160.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 148.8258 Tm -.005 Tc [(Components,)83()]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 215.9806 148.8258 Tm ( InTech Magazine)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 284.5934 148.8258 Tm (, September)Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 136.8258 Tm [(Oct)9.8(ober 2018, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 218.5009 136.8258 Tm [(https:/)109.4(/www)60.6(.isa.org/intech/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 325.6337 136.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 160.9471 124.8258 Tm -.005 Tc (201810standards/)Tj ET EMC /LBody <>BDC BT 9 0 0 9 232.9217 124.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.9742 640.8257 Tm -.005 Tc [(Heyl, J.; UL2900 Over)-8.8(view)60.6(,)83()0( Oct)9.8(ober 2017,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 545.8595 640.8257 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 362.4471 640.8257 Tm .29 1 .45 .09 k (21)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 379.447 628.8258 Tm 0 0 0 1 k -.005 Tc [(https:/)109.4(/cybersecuritysummit.org/wp-content/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 554.6697 628.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 616.8258 Tm -.005 Tc (uploads/2017/10/4.00-Justin-Heyl.pdf)Tj ET EMC /LBody <>BDC BT 9 0 0 9 528.6041 616.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.9742 604.8258 Tm -.005 Tc [(IoT)19.5( Security F)10.3(oundation, Secure Design Best)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 557.2568 604.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 362.4471 604.8258 Tm .29 1 .45 .09 k (22)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.447 592.8258 Tm 0 0 0 1 k -.005 Tc [(Pr)19.5(actice Guides Release 2,)83( No)7.3(vember 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 553.4094 592.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 379.447 580.8258 Tm -.005 Tc [(https:/)109.4(/www)60.6(.iotsecurityfoundation.org/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 530.3994 580.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 568.8258 Tm -.005 Tc [(wp-content/uploads/2019/11/Best-Pr)19.5(actice-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.447 556.8258 Tm (Guides-Release-2.pdf)Tj ET EMC /LBody <>BDC BT 9 0 0 9 461.8326 556.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.9742 544.8258 Tm -.005 Tc (ISACA)Tj ET EMC /LBody <>BDC BT 5.4 0 0 5.4 405.1367 547.7958 Tm 0 Tc ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 409.3368 544.8258 Tm -.005 Tc (, )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 413.2416 544.8258 Tm [(Assessing IoT)19.6( Internet of )19.5(Things:)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 540.6003 544.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 362.4471 544.8258 Tm .29 1 .45 .09 k (23)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 379.447 532.8258 Tm 0 0 0 1 k -.005 Tc (Upsides, Downsides and Emerging Ethics)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 538.96 532.8258 Tm (, USA,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 561.4977 532.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 520.8258 Tm -.005 Tc (2017, )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 403.3867 520.8258 Tm [(https:/)109.4(/www)60.6(.isaca.org/bookst)9.8(ore/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 535.1498 520.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 508.8258 Tm -.005 Tc [(bookst)9.8(ore-wht_papers-digital/whpaiot)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 526.4596 508.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.9742 496.8258 Tm -.005 Tc (Op cit)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 402.5735 496.8258 Tm [( NIST)19.5( 2018)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 446.1921 496.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 362.4471 496.8258 Tm .29 1 .45 .09 k (24)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.9742 484.8258 Tm 0 0 0 1 k -.005 Tc (Thales, Quantum Computing and)Tj ET EMC /LBody <>BDC BT 9 0 0 9 512.8381 484.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 362.4471 484.8258 Tm .29 1 .45 .09 k (25)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.447 472.8258 Tm 0 0 0 1 k -.005 Tc [(Cybersecurity,)83( 23 Oct)9.8(ober 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 507.2465 472.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 379.447 460.8258 Tm -.005 Tc [(https:/)109.4(/www)60.6(.thalesgr)9.8(oup.com/en/germany/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 548.7501 460.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 448.8258 Tm -.02 Tc (magazine/quantum-computing-and-cybersecurity)Tj ET EMC /LBody <>BDC BT 9 0 0 9 564.703 448.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.9742 436.8258 Tm -.005 Tc [(GSMA, Common Implementation Guide t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 548.3563 436.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 362.4471 436.8258 Tm .29 1 .45 .09 k (26)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.447 424.8258 Tm 0 0 0 1 k -.005 Tc [(Using the SIM as a Root of )19.5(T)36.6(rust t)9.8(o)0( Secure)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 549.5666 424.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 412.8258 Tm -.005 Tc [(IoT)19.5( Applications,)83( 3 December 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 521.5344 412.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 379.447 400.8258 Tm -.02 Tc [(https:/)109.4(/www)60.6(.gsma.com/iot/wp-content/uploads/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 563.1429 400.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 388.8258 Tm -.005 Tc [(2019/12/IoT)106.5(.04-v1-Common-Implementation-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.447 376.8258 Tm (Guide-1.pdf)Tj ET EMC /LBody <>BDC BT 9 0 0 9 424.3215 376.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.9742 364.8258 Tm -.005 Tc [(Micr)9.8(osoft, Se)6.4(ven Pr)9.8(oper)-24.4(ties of Highly Secure)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 559.1454 364.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 362.4471 364.8258 Tm .29 1 .45 .09 k (27)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.447 352.8258 Tm 0 0 0 1 k -.03 Tc [(De)6.4(vices,)83( Mar)9.3(ch 2017, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 463.0636 352.8258 Tm [(https:/)109.4(/www)60.6(.micr)9.8(osoft.com/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 567.5068 352.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 340.8258 Tm -.005 Tc [(en-us/resear)9.3(ch/wp-content/uploads/2017/03/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 559.6409 340.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 328.8258 Tm -.005 Tc [(Se)6.4(venPr)9.8(oper)-24.4(tiesofHighlySecureDe)6.4(vices.pdf)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 547.5142 328.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.9742 316.8258 Tm -.005 Tc [(National Institute of Standards and )19.5(Technology,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 567.5896 316.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 362.4471 316.8258 Tm .29 1 .45 .09 k (28)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.447 304.8258 Tm 0 0 0 1 k -.005 Tc [(Crypt)9.8(ogr)19.5(aphic Module V)22.5(alidation Pr)9.8(ogr)19.5(am,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 551.999 304.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 292.8258 Tm -.005 Tc [(USA, 11 Oct)9.8(ober 2016, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 470.0176 292.8258 Tm [(https:/)109.4(/csr)9.3(c.nist.go)7.3(v/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 551.2673 292.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 280.8258 Tm -.005 Tc [(Pr)9.8(ojects/crypt)9.8(ogr)19.5(aphic-module-v)7.3(alidation-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.447 268.8258 Tm [(pr)9.8(ogr)19.5(am)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 412.2627 268.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.9742 256.8258 Tm -.005 Tc [(Gemalt)9.8(o, SafeNet Data Pr)9.8(otection on)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 528.459 256.8258 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS1 gs BT /F4 1 Tf 9 0 0 9 362.4471 256.8258 Tm .29 1 .45 .09 k (29)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.447 244.8258 Tm 0 0 0 1 k -.005 Tc [(Demand,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 418.9973 244.8258 Tm [(https:/)109.4(/safenet.gemalt)9.8(o.com/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 533.5865 244.8258 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.447 232.8258 Tm -.005 Tc [(data-pr)9.8(otection-on-demand/)]TJ ET EMC /P <>BDC BT /F1 1 Tf 7 0 0 7 413.8918 20.9379 Tm 0 Tc [( 2020 ISACA. All rights reser)-8.8(ved. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 521.5236 20.9379 Tm [(www)60.6(.isaca.org)]TJ ET EMC Q endstream endobj 473 0 obj <>/ExtGState<>>> endobj 6 0 obj <> endobj 5 0 obj <> endobj 22 0 obj <>stream Adobe d C #"""#'''''''''' p" s !1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjz ? f͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6l endstream endobj 23 0 obj <>stream Adobe d #"""#'''''''''' !! !!'''''''''' p" " s !1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjz m !1AQa"q2#BRbr3$4CS%cs5DT &6E'dtU7()euFVfvGWgw8HXhx9IYiy*:JZjz ? 섁ŏJot](wġԒK%{-gM2ruOz1Ǩxɜ@3Ξ$9OQ`yW'FyvI7c䦵FD&עdN[KK5cż0Kѡa}Zx4A Y$_h>.8P0ݿǪGh2ןG) |ŊY dd#
Fuq,>WF>[U෴l$'?o?4PIjdIDMvB!C0;y lc{m)͊8yD
M~!˧hR
w͕/$6Vlٰ|r6mb͍-+6lثy5e$FQ62T|b1h/ $?,Sm?1:<YfCTw}Odkt#Ǔ.Fvk➣z|#yp1Dl,3uY m#"|mba֏ԯJ$N-gKkhY`Ƃ gF=ŰymaQ-/*jrjݭ*݅Iޙ