Issue Details
Lack of Device Management
iot08 • Rank #8 in OWASP 2023
Explanation
IoT deployments often include hundreds or thousands of devices that require centralized management. Lack of device management prevents security monitoring, configuration updates, vulnerability patching, and secure decommissioning. Without management capabilities, organizations cannot maintain security posture across their IoT fleet.
Remedy
Implement device inventory and asset management. Provide remote configuration and security policy management. Support secure device decommissioning and data wiping. Implement device health monitoring and alerting. Maintain visibility into device security posture.
| Year | Rank | Category |
|---|---|---|
| 2018 | #8 | iot08 - Lack of Device Management |
| 2022 | #8 | iot08 - Insecure Physical Security |