scope:

This Recommendation is targeted at the telecommunication/ICT systems and supporting infrastructure which support Internet of things (IoT) devices. Both must have the flexibility to keep up with changes in the rapidly moving field of cybersecurity so that they can cope with new security threats and challenges as they emerge. The guidelines described in this Recommendation include, but are not necessarily limited to:

- quantifying risk for an IoT system;

- deployment of updated security protocols and standards;

- adoption of appropriate cryptographic algorithms;

- adoption of relevant authentication systems.

This also applies to the removal of these components when they have been deprecated or their use is no longer advised. The Recommendation intentionally does not provide guidance on specific risk analysis methodologies, cryptosystems, standards or algorithms.