Network: Have a Plan
One of the the most frightening phrases that can come from a CISO's mouth is, "I never thought of that." The phrase is especially scary when it involves a small, powerful device attached to the network.
NIST has responded to Internet of Things (IoT) security concerns with the first in a series of papers largely concerned with the foundation of IoT security: Plan for IoT devices attaching to your network.
The plan should include topics such as defining the circumstances in which a RasPi can legitimately connect to the network, the tasks it could be used for, and the configuration required for the devices. The plan also should take into consideration differences between the RasPi and standard desktop computers, and the vulnerabilities that can exist in the various distributions of Linux available for the RasPi.
(Image: Johnstocker VIA Adobe Stock)