The Critical Need for Vulnerability Disclosure in the IoT Security Landscape - Seguridad Mania.com - España y América Latina

Only 10% of IoT vendors disclose timelines for acknowledging and resolving reported threats—and a staggering 73% of consumer IoT companies are in breach of the Product Security and Telecommunications Infrastructure (PSTI) Act, with no vulnerability disclosure policy (VDP) at all. David Rogers, MBE, chair of the Fraud and Security Group at the GSMA, and Laurie Mercer, Director of Solutions Engineering at HackerOne, discuss the state of vulnerability disclosure in global consumer IoT, and strategies you can adopt to implement a transparent, productive, and compliant VDP at your organization. Key Takeaways: -Understanding VDP policy trends and projections and how they affect you -Learn which companies pass the disclosure threshold test (and which ones fail) -Get policy recommendations for incentivizing security researchers -Discover how IoT leaders like Samsung, Apple, and Panasonic structure their VDPs