Certified Internet of Things Security Practitioner (CIoTSP)

Introduction

• Course Description
• How to Use This Course

Planning an IoT Implementation

• Topic A: Select a General Architecture for an IoT Project
• Topic B: Identify the Benefits and Challenges of IoT
• Summary

Constructing and Programming an IoT Device

• Topic A: Select and Configure a Processing Unit
• Topic B: Select a Microcontroller Power Source
• Topic C: Use a Software Development Kit to Program an IoT Device
• Summary

Communicating with an IoT Device

• Topic A: Communicate Using Wired Connections
• Topic B: Communicate Using Wireless Connections
• Topic C: Communicate Using Internet Protocols
• Summary

Processing IoT Data

• Topic A: Process IoT Device Input and Output
• Topic B: Process Data in the Cloud
• Topic C: Provide M2M Communication
• Summary

Managing Risks on IoT Projects

• Topic A: Identify IoT Security and Privacy Risks
• Topic B: Manage IoT Security and Privacy Risks
• Topic C: Manage IoT Safety Risks
• Summary

Undertaking an IoT Project

• Topic A: Identify Real World Applications for IoT
• Topic B: Follow the IoT Development Lifecycle
• Summary

Managing IoT Risks

• Topic A: Map the IoT Attack Surface
• Topic B: Build in Security by Design
• Summary

Securing Web and Cloud Interfaces

• Topic A: Identify Threats to IoT Web and Cloud Interfaces
• Topic B: Prevent Injection Flaws
• Topic C: Prevent Session Management Flaws
• Topic D: Prevent Cross-Site Scripting Flaws
• Topic E: Prevent Cross-Site Request Forgery Flaws
• Topic F: Prevent Unvalidated Redirects and Forwards
• Summary

Securing Data

• Topic A: Use Cryptography Appropriately
• Topic B: Protect Data in Motion
• Topic C: Protect Data at Rest
• Topic D: Protect Data in Use
• Summary

Controlling Access to IoT Resources

• Topic A: Identify the Need to Protect IoT Resources
• Topic B: Implement Secure Authentication
• Topic C: Implement Secure Authorization
• Topic D: Implement Security Monitoring on IoT Systems
• Summary

Securing IoT Networks

• Topic A: Ensure the Security of IP Networks
• Topic B: Ensure the Security of Wireless Networks
• Topic C: Ensure the Security of Mobile Networks
• Topic D: Ensure the Security of IoT Edge Networks
• Summary

Ensuring Privacy

• Topic A: Improve Data Collection to Reduce Privacy Concerns
• Topic B: Protect Sensitive Data
• Topic C: Dispose of Sensitive Data
• Summary

Managing Software and Firmware Risks

• Topic A: Manage General Software Risks
• Topic B: Manage Risks Related to Software Installation and Configuration
• Topic C: Manage Risks Related to Software Patches and Updates
• Topic D: Manage Risks Related to IoT Device Operating Systems and Firmware
• Summary

Promoting Physical Security

• Topic A: Protect Local Memory and Storage
• Topic B: Prevent Physical Port Access
• Summary

Mapping CertNexus Certified Internet of Things Practitioner (CIoTP)

Appendix A: Mapping CertNexus Certified Internet...tioner Exam ITS-110 Objectives to Course Content