JCC logo
OWASP Risks Atlasby Jer Catallo

Issue Details

Lack of Device Management

iot08 • Rank #8 in OWASP 2023

Explanation

IoT deployments often include hundreds or thousands of devices that require centralized management. Lack of device management prevents security monitoring, configuration updates, vulnerability patching, and secure decommissioning. Without management capabilities, organizations cannot maintain security posture across their IoT fleet.

Remedy

Implement device inventory and asset management. Provide remote configuration and security policy management. Support secure device decommissioning and data wiping. Implement device health monitoring and alerting. Maintain visibility into device security posture.

YearRankCategory
2018#8iot08 - Lack of Device Management
2022#8iot08 - Insecure Physical Security