2 ms·
It's good that you secured your IoT device. But if this regulation were in effect, you would not be declared secure until you had a pentest. That means regardle
by sillysaurus3 10y ago
It's good that you secured your IoT device. But if this regulation were in effect, you would not be declared secure until you had a pentest. That means regardless of how much effort you put in, you'd need to pay a (relatively) massive amount of money.
- bradstewart 10y agoI guess the regulation wouldn't require a pentest in my mind, at least not for all classes of devices. Something along the lines of self-regulation/providing basic documentation that you've adhered to some set guidelines would be a good step in my mind. If you're found in violation of those guidelines though, by all means require a pentest going forward. I honestly haven't a clue whether or not that might work in practice though.