FFIEC IT Examination Handbook AIO-VII.E: VII.E Internet of Things (Architecture, Infrastructure, and Operations)

What does AIO-VII.E require?

Where internet of things devices such as security, HVAC, personal assistant and other connected devices are used, management addresses the risks that they interact with the physical world and may not meet conventional confidentiality, integrity and availability practice, cannot always be accessed, managed, monitored or patched centrally, and carry the further risks the booklet describes, applying NIST's IoT considerations to their inventory, segmentation, configuration and monitoring.