IoTSF Webinar
2024-03-28 14:00 - 15:00 (Europe/London) | Webinar
IoTSF Webinar
Join our next webinar on Thursday 28th March 2024.
In February we had an automotive special, so this month it’s aviation (perhaps we’ll do rail one day soon to complete the planes, trains and automobiles set!)
Ken Munro of Pen Test Partners and Lee Speakman of the University of Salford will be our guests.
Ken has been working in IT security for over 15 years. He writes for various newspapers and industry magazines and is a regular source of comment and sanity on IoT issues to various news agencies and the BBC.
Lee is a Senior Lecturer at the University of Salford. He is the Course leader for Cyber Security, Threat Intelligence and Forensics.
Register on Zoom now and join host Chris Bennison as IoTSF’s popular monthly webinar series continues.
Register

TechWorks AI Launchpad
2024-04-16

IoTSF Webinar
2024-04-25 14:00 - 15:00 | Webinar
IoTSF Webinar
We’ll be joined by Toby Wilmington of qomodo with the topic ‘Threats to XIoT and how can we secure it?’
In this presentation, Toby, CEO of qomodo will introduce us to the Extended Internet of Things (XIoT) and share their recent analysis on the evolving threat landscape of these interconnected technologies.
Register

IoTSF Houston Webinar - Securely Achieving IoT Value in OT and SCADA Networks
2024-05-09 18:00 - 19:00 | Webinar

ManySecured WG online meeting
2024-05-15 14:00 - 15:00, 2023-09-05 14:00 - 15:00
Our monthly meetings are open to all. The IoTSF ManySecured WG is about leveraging the power of the crowd – working on open technical standards, specifications and finding solutions first and foremost.
It is supporting the UKRI Digital Security by Design Challenge and the Secure Networking by Design (SNbD) project with the University of Oxford, NquiringMinds and TechWorks.
Our aim: “to reduce the threat and scale of remotely initiated cyber-attacks, securing the network against memory-based vulnerabilities.”
Current topics include:
1) Update on NIST – trusted onboarding
2) SBOM and device identity problem:
How does a device advertise its SBOM descriptor “securely”? –
a) review the problem
b) identification of similar problems : what’s out there?
c) outline of potential solutions: proposals required
d) next steps – planning
3) Device lifecycle policies
a) review/reminder of primary use cases
b) proposal: framing the life cycle (continuous assurance) problem – including MUD
c) outline of a potential evidence model (D3/VC based)
d) next steps
4) Economic model for vulnerability management
a) share of draft
b) request for contributions/authors
5) IoTSF conference track – potential topics on ManySecured and SNbD
We also encourage you to join our slack channel to participate in the project.
Slack invite: https://join.slack.com/t/manysecured/shared_invite/zt-1t1f6j582-y1Lvi0aEoItd2_EtvuGVCA
Please contact James Willison for registration details at james.willison@techworks.org.uk

IoTSF Webinar
2024-05-30 14:00 - 15:00 | Webinar
IoTSF Webinar
The exciting new series of monthly Zoom webinars continue on Thursday 30th May.
‘Firmware Vulnerability Management: Balancing Open Source vs. Proprietary Code’ with Attila Szasz of BugProve and ‘How Threat Modelling helps achieve EU CRA compliance’ with Jonny Tyres of Threatplane.
Throughout 2024, we’ll showcase the latest thought leadership on a range of topics so that you stay ahead of the curve on IoT security.
With IoTSF’s Chris Bennison hosting, it’s sure to be an interesting and informative session.
Register

June IoTSF Houston Webinar: Security Trends with Extended Internet of Things (XIOT)
2024-06-13 18:00 - 19:00
June IoTSF Houston Webinar: Security Trends with Extended Internet of Things (XIOT)Join us for an insightful webinar on Security Trends with Extended Internet of Things (XIOT), featuring Toby Wilmington, CEO of qomodo. Toby brings over a decade of expertise in building and securing some of the world’s most targeted networks, including deploying advanced detection and response capabilities for renowned organizations such as NATO and BAE Systems.
Date and Time: June 13, 2024, at 12:00 PM America/Chicago
Registration URL: https://iotsfhoustonchapter.clickmeeting.com/security-trends-with-extended-internet-of-things-xiot-/register
In this webinar, we will explore the Extended Internet of Things (XIoT) and provide an in-depth analysis of the evolving threat landscape, including geopolitical threats. With industrial networks increasingly converging with corporate networks and ultimately connecting to the internet, understanding and mitigating these threats is more crucial than ever.
FREE REGISTRATION

IoTSF Webinar
2024-06-27 14:00 - 15:00

IoTSF Plenary 2024
2024-07-03 09:30 - 16:00 | One Birdcage Walk, 1 Birdcage Walk, London, SW1H 9JJ
IoT Security Foundation Plenary 2024
Register for FREEThis open plenary session follows the progress of the IoTSF Working Group Projects, features industry speakers, wider IoTSF operations and partnership updates as well as ample networking breaks.
This event is FREE for both IoTSF members and non-members.
Full details
The IoTSF Plenary returns this July and we have some fantastic topics to discuss.
One Birdcage Walk is a prestigious venue in the heart of London, near Sir Winston Churchill’s War Rooms and St James’ Park. This will be a significant follow up to the recent TechWorks AI meeting at Bletchley Park.
We will hear the very latest updates from the leaders of the IoTSF working groups in our own campaign to secure the internet of things in 2024 and beyond.
Our battle is no less daunting than the one faced 80 years ago. If anything, we face more complex enemies, but with the brilliant minds and determination of the IoTSF, we can achieve great things.
First, we’ll hear from John Moor and Chris Bennison as they outline the work of IoTSF in line with International Govt strategies and new chapters. Second, Chris will highlight the new Regulatory Watch group’s guideline for member’s on the PSTI Act and the importance of the Cyber Resilience Act with a panel discussion.
After some coffee and valuable networking, Ian Pearson and leaders from the Assurance Framework will address how manufacturers can optimise their security capabilities by utilising its requirements.
This will be followed by a panel led by Sarb Sembhi, from the Smart Built Environment Group discussing a new IoTSF procurement guide. It will look at the topic from the perspective of procurement professionals and relevant stakeholders in IoT Cybersecurity in sustainable buildings.
After lunch we will hear the very latest news on our UKRI Digital Security by Design Project, CHERI Morello and how the TechWorks community has impacted it.
Dr. Nick Allott and Professor Andrew Martin, will showcase how CHERI can make a real difference in Gateways, the very heart of many networks. If we can make this happen, all the other systems will be more resilient. This includes the significant work of many of our members in the latest NIST Trusted IoT onboarding project.
Last, but not least, Haydn Povey will introduce the TechWorks Global Marketing Strategy Report for CHERI based Router + Connected Device Infrastructure. Haydn brings a wealth of experience in the global semi-conductor industry.
Join us to be a part of this digital war effort!

Time
Content

09:30
Registration

10:00
Welcome

10:10
Regulatory Watch: Stephen Pattison, Prof. Paul Kearney and Paul Phillips will take part in a panel discussion entitled ‘The regulators are coming to get you!

10:50
Break

11:10
Assurance Framework: Hear from Trevor Hall and Ian Pearson on how the group has a major new approach with the aim of reaching a new audience.

11:50
Achieving Building Sustainability Compliance and Resilience through Procurement: Smart Built Environment – Panel: Sarb Sembhi, CTO, CISO Virtually Informed, Mo Ahddoud CISO Chameleon Cyber Consultants), Jason Shaw Associate Director, Security, Technology Engineering, AECOM, and James Willison (IoTSF)

12:30
Lunch

13:30
The Digital Security by Design Challenge: SNbD/NIST/CHERI: Dr Nick Allott, CEO NquiringMinds, and Prof Andrew Martin, University of Oxford

14:40
Break

15:00
Global Marketing Strategy Report for CHERI based Router + Connected Device Infrastructure with Q&A : Led by Haydn Povey, SCI, with Nick Allott.

15:45
Valedictory

.
Speakers
Sarb Sembhi
CTO, CISO Virtually Informed
Biography
Sarb is the CTO at Virtually Informed and was the Global CISO for AirEye and the Noord Group. He has previous worked as a consultant covering most issues in risk and security. Sarb’s contributions to the industry include the Executive Steering Board of the IoT Security Foundation.
Other contributions include: Past President of the ISACA London Chapter, Chair of ISACA International GRA Region 3 Sub-Committee, Chair of ISACA International GRA Committee, ISSA UK Advisory Group member, InfoSecurity Magazine Editorial Group member. Sarb has also served on several Security Standards Groups, and continues to write for several publications and speak at risk and security events around the world.
Mo Ahddoud CISM
Chief Information Security Officer, Chameleon Cyber Consultants
Biography
Mo is an active contributor to the cybersecurity industry. He writes regularly in the international security journal. He is an ISACA EU Advisory Taskforce member contributing to the European Commission amendment to the Cyber Security Act.
Mo was recognised in 2017 by the British Computer Society for Security programme of the year. In 2018, he was recognised as a cyber security innovator at the CA awards in Las Vegas. His recent interests include AI and Smart Cities.
Jason Shaw
Associate Director, Security, Technology Engineering, AECOM
Biography
Jason Shaw is a security technology specialist and Chartered IT Professional with over 30 years of experience gained within the information technology and integrated electronic security industry. He has provided a range of physical, electronic and cyber security consulting services for numerous clients and projects within the built environment throughout the UK, Europe, Middle East, Africa and Asia. My particular interest is OT and IoT centric solutions within the smart built environment, the cyber security risks posed to information assets, and the development of cyber security strategies to reduce and manage these risks.
He is a member and contributor to a specialist Smart Built Environment workgroup within the IoT Security Foundation, an organisation formed to develop key security initiatives relating to the vulnerabilities Smart Buildings inherently have. Additionally, he is a member of the BCS, ISACA, Institution of Engineering and Technology, ASIS International and The Security Institute.
Specialities: Security Masterplanning – Project Management – Information Security – Cyber Security & Cyber Risk Management – Smart Buildings – Cyber Security Strategies for IoT, CPS & ICS Solutions – Security Technology Engineering – Physical Cyber Convergence – Security Integration – Electronic Security Systems Design.
James Willison
Project and Engagement Manager, IoT Security Foundation
Biography
James Willison is Project and Engagement Manager at the Internet of Things Security Foundation and a recognised International leader in Security Convergence and Enterprise Security Risk Management.
James is proud to be a member of the Eric Liddell Community. Named #8 Cyber Security Professional IFSEC Global Influencers Security and Fire 2020. James is delighted to support the Kindness Games and has joined TKG Alumni! James is a judge for the 2022 IFSEC Global Influencers. Shortlisted in Security Serious Unsung Security Heroes Awards 2018 as a Security Leader/mentor. He is a reseller of Kaseware, an innovative cyber physical investigative tool. James is Co-Chair, Smart Built Environment Working Group, Internet of Things Security Foundation and a member of ASIS International, ISACA and the Security Institute. James was awarded the Imbert Prize for an ‘outstanding contribution to the Security Industry in 2011’ for his work on convergence with ASIS Europe and the Information Security Awareness Forum. He has more than 20 years of management experience in the physical and information security industry, including posts as Advisor on Convergence to the Mitie TSM Board, Senior lecturer in Security Management at Loughborough University and Digital Security Expert with the European Union. He has co-authored three White Papers on ESRM, SMART GDPR Assurance for a Smarter world and Smart Buildings and Cities Security with his colleague and fellow convergence expert, Sarb Sembhi, sponsored by AXIS Communications and published by Unified Security Ltd. He has helped develop and build partnerships and relationships in numerous projects between security professionals including writing new content in published International Standards. He regularly writes articles for IFSEC Global and is an established speaker at International security conferences.
Nick Allott
CEO, NquiringMinds
Biography
Nick is CEO of NquiringMinds, an AI analytics company founded on robust cyber security principles. He has been developing and deploying AI technologies for almost 30 years, and is a recognised cyber security expert.
Nick was formally, CTO of OMTP, a security focussed, international mobile standards organisation responsible for many technologies now widely deployed. Significant among OMTP deliveries, is the Trusted Execution Environment, (TEE) the security core of most CPUs and SIM technology. TEEs now ship a the rate of 1 billion per year. Nick is also a Director of the Webinos Open Source Foundation: a collaborative initiative for secure IOT interaction based on PKI.
For Shell, Nick helped develop their data mining products (later acquired by Accenture). And as Technology Director for Motorola, Nick had responsibility for their speech recognition and voice Personal Assistant products. Nick Joined start-up Fastmobile (multimodal speech recognition) as their CTO in 2000 until their acquisition by RIM. His first full time job was developing neural networks for Neural Computer Sciences, followed by a stint at the part Microsoft owned Dorling Kindersley Multimedia, where he worked on search technology and 3D graphics platforms.
NquiringMinds was selected by DCMS to develop an innovative, secure data sharing platform for Smart Cities, which forms the basis of the current product line. Nick has advised the UK Government on the Secure by Default Program and was among a handful of technology CEOs selected by, the then Prime Minister, Theresa May, to accompany on her first trade mission to India. Nick is a Fellow of the British Computer Society, the Institute of Analysts and Programmers and the Royal Society of Arts.
Nick has a degree in Cognitive Science, a PhD in Artificial Intelligence and is a Visiting Professor and the University of Southampton.
Prof Andrew Martin
Professor of Systems Security, Department of Computer Science , University of Oxford
Biography
Andrew Martin is Professor of Systems Security in the Department of Computer Science at the University of Oxford. His main interest is in how hardware-software co-design can enhance the security of networked distributed systems. He has also led a range of cross-disciplinary efforts across the University and beyond – with a particular interest in how human factors can enhance or confound the best security technologies. He thinks that the key to progress is strong rigorous foundations, mixed with a great degree of pragmatism.
Haydn Povey
CEO & Founder, SCI Semiconductor Ltd
Biography
Haydn is the Founder & CEO of SCI Semiconductor, a company focused on developing and delivering next generation security IP and devices. The company is a leading advocate of CHERI technology, with its ability to resolve over 70% of critical vulnerabilities through enhance Memory Safe technology, compartmentalisation, and integrated component management. The company works closely with governmental and commercial entities to introduce CHERI technology and to solve many of the biggest issues in critical infrastructure and industry today.
Haydn has been in senior management at leading global technology companies for over 30 years, including as Chief Strategy Officer at IAR, through the successful acquisition of Secure Thingz Ltd. He additionally held senior marketing and business development roles at ARM Holdings, the leading Microprocessor IP (Intellectual Property) company. Haydn headed ARMs strategy and product roadmaps for Security within IoT and M2M marketplaces where he worked with critical groups within the US and UK government responsible for the development and deployment of security frameworks, alongside many leading silicon vendors, OEMs and system integrators and software solutions.
Previously Haydn was Director Security Products & Technologies within the ARM Processor Division where he owned a broad array of products including TrustZone, which delivers security foundations in the majority of global mobiles and tablets, and SecurCore, which is the foundations for the majority of 32-bit SmartCards and SIMS. Prior to owning security at ARM Haydn led the development and introduction of the Cortex-M microprocessor family which has led to the rapid adoption of 32-bit microcontroller technology around the globe and underpins the majority of Internet of Things devices.
Dr Stephen Pattison
Chairman, IoT Security Foundation
Biography
Stephen was responsible for ARM’s Public Affairs, including contributions to public policy thinking across the world. His focus was London, Brussels, Washington and, increasingly, China. He was the first person to be appointed to a Public Affairs role at ARM, in 2012. Key issues on which he is working include Internet of Things, Smart Cities, Data Protection, Energy Efficiency, and Security. He also oversees ARM’s Corporate Responsibility Programme.
Prior to joining ARM, Stephen was CEO, International Chamber of Commerce UK, where he represented the interests of a range of companies and focussed on various policy and international trade issues. Before that he worked for James Dyson (Vacuum cleaners etc) as Head, International Business Development, where he introduced new products into new markets as well as accelerating growth in existing markets. He was once a British Diplomat and worked at the British Embassy in Washington, and on UN issues in London, New York and Geneva.
Stephen has a Master’s Degree from Cambridge University, and a Doctorate from Oxford. In 2003-4 he spent a year at Harvard as Fellow in International Affairs at the Weatherhead Center.
Prof. Paul Kearney
Cybersecurity Consultant and retired Professor of Cybersecurity, Birmingham City University
Biography
Paul Kearney has recently retired from the position of Professor of Cybersecurity at Birmingham City University. Previously, he worked in R&D roles for British Aerospace, Sharp Laboratories of Europe, and British Telecommunications. He retains an active interest in cybersecurity research, undertaking freelance consultancy, contributing to activities of the IoT Security Foundation, acting as an expert evaluator and reviewer for research programmes and serving on the advisory boards of research projects. He holds a BSc from the University of Liverpool and a PhD from the University of Durham, both in theoretical physics and is a Full Member of the Chartered Institute of Information Security.
Ian Pearson
Principle Embedded Solutions Engineer, Microchip Technology Inc.
Biography
Ian Pearson is a Principal Embedded Solutions Engineer at Microchip Technology Inc. currently focussed on FPGA, Security and IoT applications. He is active on the IoTSF Assurance Framework, Supply Chain and Many Secured working groups.
Trevor Hall
Director of Systems Engineering, Synaptics Inc.
Biography
Trevor has been in pioneering roles in the semiconductor, software, and systems industry for over 40 years. From his early days at Philips, where he safeguarded Blu-Ray master keys, to his current role in securing IoT video products at Synaptics/DisplayLink, Trevor’s expertise in product security makes him the “go to” person in Synaptics. As the third Chair of the IoTSF Assurance Framework Working Group and the primary editor of its publications since 2019, he has had been significantly influencing the product security field for the rest of the industry. Trevor is dedicated to communicating and sharing best practices in system security, demonstrating his passion and commitment to the industry.

ManySecured’s leaders’ “new build” in NIST’s IoT onboarding guidance!
2024-07-10 15:00 - 16:30
NIST’s New ‘draft’ Trusted IoT Onboarding Guide with ManySecured’s leaders!
“Establishing trust between a network and an Internet of Things (IoT) device prior to providing the device with the credentials it needs to join the network is crucial for mitigating the risk of potential attacks. There are two possibilities for attack. One happens when a device is convinced to join an unauthorized network, which would take control of the device. The other occurs when a network is infiltrated by a malicious device. Trust is achieved by attesting and verifying the identity and posture of the device and the network before providing the device with its network credentials—a process known as network-layer onboarding” (NIST NCCOE p 1).
The NCCoE, in collaboration with 11 product and service providers, has produced five builds demonstrating network-layer onboarding and two builds demonstrating the factory provisioning process. The configurations offer secure ways to provision devices to a network using their network credentials.
TechWorks and the IoTSF ManySecured WG is proud to have supported Dr Nick Allott, Steve Clark, and Michael Richardson who have played key roles in developing important aspects of the builds. ManySecured WG Leader, Nick Allott, explains,
“So, what we’ve done is we’ve defined a set of data structures and protocols that allow an IoT device to be assessed for its security posture pre onboarding. And not only that, it allows that security posture to be continuously assessed and if it falls below a threshold it gets kicked off.”

https://iotsecurityfoundation.org/wp-content/uploads/2024/07/Nick-Allott-and-NIST-Trusted-IoT-Onboarding.mp4
Join the NIST NCCoE for a webinar to discuss guidance and considerations for trusted IoT onboarding to help organizations safeguard both their IoT devices and their networks.
Recently, NIST released the final draft publication of NIST Special Publication 1800-36, Trusted IoT Device Network-Layer Onboarding and Lifecycle Management, which includes updates to several of the builds. The public comment period for the publication is open until July 30, 2024.
Join the ManySecured Working Group and get a chance to contribute and learn how to securely onboard your devices!
Our next meeting is on July 9th at 2pm BST, 9am EDT.
Contact: James Willison, IoTSF Project and Engagement Manager: james.willison@techworks.org.uk

IoTSF Webinar - July
2024-07-25 14:00 - 15:00

IoTSF Webinar
2024-08-29, 2024-09-26 | Webinar

ManySecured WG Online meeting
2024-09-03 14:00 - 15:00
Agenda

Update on NIST Trusted Onboarding project
Review of the authorisation/assurance use case Extension : widening the networks in scope. Interested in any feedback on perceived importance and technical methods of collecting policy evidence for :

5G
LoraWAN
KNX
Satellite
OCF

3. PSTI discussion

What is the current best practice for supplying PSTI evidence?
What does an ideal system look like?
How do we formally establish applicability? (How do we know which devices (device families) are covered by which PSTI statement?

Slack invite: https://join.slack.com/t/manysecured/shared_invite/zt-1t1f6j582-y1Lvi0aEoItd2_EtvuGVCA
Please contact James Willison for log in details : james.willison@techworks.org.uk

IoTSF Houston Mixer Event : Navigating the Future
2024-09-25 08:00 - 17:00 | Houston, United States

The IoTSF Conference 2024
2024-10-23 | The IET Savoy Place, 2 Savoy Place, London, WC2R 0BL, United Kingdom

IoTSF Webinar: Cybersecurity labelling for consumer IoT products
2024-10-31 | Webinar

Assuring Systems Integrity for Software and AI : From SBOM to TAIBOM
2024-11-19 09:30 - 16:00 | University of Oxford, Oxford, OX2 6PN

IoTSF Amsterdam meetup: Why IoT mandates zero tolerance
2024-11-21 | The Hague, Postbus 5818, Rijswijk, 2280 HV, Netherlands

IoT Security Foundation Bangalore Chapter Meetup
2024-11-23 | Bengaluru

IoTSF Webinar: NCSC and BSI on post quantum cryptography and RED
2024-11-28 | Webinar

TechWorks Gala Dinner and Awards 2024
2024-12-04 18:30 - 2024-12-05 01:00 | London

IoTSF January Webinar
2025-01-30 14:00 - 15:00

IoTSF Melbourne chapter EOI event
2025-02-12 18:00 - 20:00 | Melbourne, Australia
IoTSF Melbourne chapter EOI event
Register HEREWe welcome the IoT industry to come together to introduce the IoT Security Foundation (IoTSF) and seek Expressions Of Interest in becoming local members of a Melbourne chapter.
The purpose of this event is to attract IoT and security professionals to gather to hear about the IoTSF, its purpose and mission, and to consider prospective membership and interest in participating in the Melbourne chapter.
The evening will also include a practical presentation by Michael Lindsay of Blueside followed by informal networking with peers.

IoTSF Webinar Special: RED Article 3.3 Radio product cybersecurity - CE conformity and the August 2025 deadline
2025-02-13 14:00 - 14:30 | Webinar
IoTSF Webinar Special: RED Article 3.3 Radio product cybersecurity – CE conformity and the August 2025 deadline
RegisterWith citation of EN18031 standard in the EU Official Journal, the routes to conformity for connected radio products have become clearer to meet the 1st August 2025 deadline for applicability.
This webinar will provide an introduction to EN18031-1/2/3 and the high level steps OEMs need to take to verify which products are in scope of Art 3.3 and which of the three EN18031 standards applies based on the article 3.3 sub parts d, e or f.
Also covered will be some suggestions as to where the IoTSF’s Assurance Framework could be used to support the preparation of the Technical File for documenting compliance with EN18031.
Richard Marshall:
Richard was Plenary Chair for five years and a founding member of the Internet of Things Security Foundation.
Richard is one of the lead authors for the foundation’s Assurance Framework, which has been internationally recognized by the EU’s ETSI and US NIST standards bodies, as a point of reference for IoT security.
Richard was also a contributor/reviewer for the UK Government’s ‘Code of Practice for Consumer IoT Security’, ETSI’s technical standard TS 103 645 and harmonized standard EN 303 645 on IoT Security and more recently, an expert on the CENELEC WG-8 RED (EN18031-1/2/3) and WG-9 CRA European Cybersecurity standards committees.
Richard is currently the chair of the BSI IST/33/-/9 ‘Special Working Group – Cyber Resilience Act Standardization Request’, whose role it is, is to lead the BSI [UK] expert delegation in CENELEC, for the co-ordination of the cyber-security standardisation activities relating to the EU’s CRA (Cybersecurity Resilience Act).
