- ESB - iotsfmm.org

IoTSF ESB - Physical Meeting
by John Moor May 21, 2024

May 21, 2024

NOTE: THIS IS NOT A VIRTUAL MEETING – PHYSICAL ONLY Agenda and joining details to be confirmed - please mark your diaries.

1 0

IoTSF ESB - Physical Meeting
by John Moor May 17, 2024

May 17, 2024

Agenda and joining details to be confirmed - please mark your diaries. ________________________________________________________________________________ Microsoft Teams Need help?<https://aka.ms/JoinTeamsMeeting?omkt=en-GB> Join the meeting now<https://teams.microsoft.com/l/meetup-join/19%3ameeting_NmM5MmY0MzItNzY2Yi00…> Meeting ID: 372 074 276 159 Passcode: qErDKr ________________________________ For organisers: Meeting options<https://teams.microsoft.com/meetingOptions/?organizerId=0aae5b3d-0025-46cb-…> ________________________________________________________________________________

1 0

IoTSF ESB Agenda for virtual meeting May 8th, 10am - 12 noon
by John Moor May 1, 2024

May 1, 2024

Dear ESB Here is the agenda for next week’s meeting. 1. Welcome to new ESB members (SP) 2. IoTSF 10th Conference - October 23rd, London (JWM/All) 3. Working Groups (All) * Assurance Framework (JWM/NA) i. Evolution ii. Linking with 3rd parties * Regulatory Watch (SP) * SBE (SS) 1. Projects (NA/All) * SNbD * TAIBOM (TechWorks AI) 2. AOB (All) 3. Next Meeting Looking forward talking to you all. Please find last meeting minutes attached (also available on basecamp) Meeting details just in case: John Moor is inviting you to a scheduled Zoom meeting. Join Zoom Meeting https://us06web.zoom.us/j/82624140062?pwd=9zPMpLjubfRYI5wkDAxYJ3EZOOVxfX.1 Meeting ID: 826 2414 0062 Passcode: 136594 KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk https://www.iotsecurityfoundation.org

1 0

Couple of points - please respond by Apr 10.
by John Moor April 12, 2024

April 12, 2024

Dear ESB ESB Member Recommendation At the last ESB we discussed how we fortify/evolve the board. Having successfully welcomed Peter Davies, I would like to recommend we now invite Dr. Anna Maria Mandalari to join the board. Who is Anna? Anna is well known to the IoTSF membership as she has presented at IoTSF conferences (2022 and 2023), is an Assistant Professor at UCL and runs an IoT lab. Here’s her last talk: https://www.youtube.com/watch?v=v-_dJsa4lSs And here’s her bio: Anna Maria Mandalari works as Assistant Professor at University College London (UCL). She is member of the UCL’s Academic Center of Excellence in Cyber Security Research (ACE-CSR). She is Honorary Research Fellow at the ISST at Imperial College London. She obtained her PhD as part of the Marie Skłodowska-Curie action, intended for excellent researchers, affiliated with the Carlos III University of Madrid. Her research interests are Internet of Things (IoT), privacy, security, networking and Internet measurement techniques. In addition to her research, Anna is Co-Founder & CTO of a startup providing privacy and security solutions for consumer IoT devices. She gives invited talks all around the world to promote research and create awareness on security, privacy, and ethical AI. Most of her research experiences have also significantly contributed to several EU-funded research projects and have had a strong media impact. I have spoken to Anna on several occasions, observed her work and I am therefore happy to commend her to you. Therefore, please let me know your position by c.o.b Wednesday April 10th – i.e. do you: 1. Agree – (invite her - she’ll make a great addition). 2. Not sure – (hmmm - I have questions/concerns). 3. Dunno – (ok – I have no opinion wither way). Strategic Liaison Recently, the Connectivity Standards Alliance (CSA – nee ‘Zigbee Alliance’) announced a new IoT Device Security specification (https://csa-iot.org/newsroom/the-connectivity-standards-alliance-product-se…) One of our members made a post on Basecamp asking whether it would add to confusion for manufacturers and whether it might affect our own work with the Assurance Framework. Fortunately, one of its protagonists (Chair of the CSA’s Working Group), is also a member, and on Basecamp, explained that it is a product certification and was likely to be complementary to our own Framework, and suggesting we have a call to discuss. I had that call with Steve Hanna (Infineon – said Chair, CSA WG) this morning. Neither of us want to add confusion or be seen to be competing hence we discussed how we could complement each other’s work. I think this is possible – indeed, we’ve discussed how to work with 3rd party cert’s and labs numerous times before. I want to make sure I’m on firm ground however and would therefore like to include this as an agenda item on the forthcoming ESB meeting (May 8th, virtual). I include it here as a ‘heads up’ and invite anyone with immediate views (Richard? Haydn?) to ping me so we can pre-discuss before May 8th. That’s all for now - thank you. KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk https://www.iotsecurityfoundation.org

5 4

New ESB Member: Peter Davies + AI launch event
by John Moor Feb. 15, 2024

Feb. 15, 2024

Dear ESB I am delighted to inform you that Peter Davies – Head of Cunning Plans at Thales – will be joining us from here on. (That could be an outdated job title now, it’s just the one I remember using previously.) I’d therefore like to officially welcome him to the group, welcome Peter! Many of you will already know Peter as he has quite pervasive in UK security circles and has often been active in our events and gatherings since we started in 2015. We will officially announce his appointment next month once we have the website etc., set up. Also, a reminder, the next ESB meeting is virtual – May 8th – you should have received a calendar invite. In other important news: please be aware that we are currently planning the launch of the TechWorks AI cross working group on April 16th at Bletchley Park as discussed at the last meeting. Details to follow, please mark it in your diaries as it would be good to have you along on the day. KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk https://www.iotsecurityfoundation.org

2 1

IoTSF ESB Virtual Meeting
by John Moor Feb. 8, 2024

Feb. 8, 2024

────────── John Moor is inviting you to a scheduled Zoom meeting. Join Zoom Meeting https://us06web.zoom.us/j/82624140062?pwd=9zPMpLjubfRYI5wkDAxYJ3EZOOVxfX.1 Meeting ID: 826 2414 0062 Passcode: 136594 --- One tap mobile +442080806592,,82624140062#,,,,*136594# United Kingdom +443300885830,,82624140062#,,,,*136594# United Kingdom --- Dial by your location • +44 208 080 6592 United Kingdom • +44 330 088 5830 United Kingdom • +44 131 460 1196 United Kingdom • +44 203 481 5237 United Kingdom • +44 203 481 5240 United Kingdom • +44 203 901 7895 United Kingdom • +44 208 080 6591 United Kingdom • +1 720 707 2699 US (Denver) • +1 253 205 0468 US • +1 253 215 8782 US (Tacoma) • +1 301 715 8592 US (Washington DC) • +1 305 224 1968 US • +1 309 205 3325 US • +1 312 626 6799 US (Chicago) • +1 346 248 7799 US (Houston) • +1 360 209 5623 US • +1 386 347 5053 US • +1 507 473 4847 US • +1 564 217 2000 US • +1 646 558 8656 US (New York) • +1 646 931 3860 US • +1 669 444 9171 US • +1 689 278 1000 US • +1 719 359 4580 US Meeting ID: 826 2414 0062 Passcode: 136594 Find your local number: https://us06web.zoom.us/u/ko9k2FaxJ ──────────

1 0

ESB Meeting Notes and Actions
by John Moor Feb. 8, 2024

Feb. 8, 2024

Dear ESB Please find the meeting notes attached. As always, I am mindful of your time – please scan the ‘ACTION’ items in the notes for a reminder (and as an alert for those who were not able to attend). I am particularly interested to get on-going input for this year’s conference (Oct 23) and ESB development – ‘thank you’ for suggestions already made. Next meeting will be virtual – May 8th: 10 – 12 – calendar invite to follow. KR., John Moor COO, TechWorks / Managing Director, IoT Security Foundation Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237 https://www.techworks.org.uk https://www.iotsecurityfoundation.org

1 0

IoTSF 10th Annual Conference
by John Moor Feb. 2, 2024

Feb. 2, 2024

Placeholder for your diaries.

1 0

Engineering Trustworthy AI
by John Moor Feb. 1, 2024

Feb. 1, 2024

Dear ESB As per our discussion at the recent meeting, we have now published a white paper and our intent to create a TechWorks Cross Working Group (xWG) on ‘Engineering Trustworthy AI’. Paper can be found here: https://www.techworks.org.uk/ai KR., John Moor Managing Director, IoT Security Foundation Make it safe to connect: Build Secure – Buy Secure – Be Secure Take a look at our FREE downloads for developers, users and the security-minded organisation: * Our #1 Download: IoT Security Assurance Framework Release 3.0 * Our #2 Download: Secure By Design Best Practice Guides * Read Our Latest Market Research Report on Vulnerability Disclosure Practice (VDP). * IoT Security: Supply Chain Considerations and Software Bill of Materials (SBoM) * Release 2 Vulnerability Disclosure Guide * Consumer IoT security quick guides and training webinars * Smart Buildings: Cybersecurity for Facilities Professionals * Home / Enterprise / Healthcare Security Architectures All available at https://iotsecurityfoundation.org<https://iotsecurityfoundation.org/> Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237

1 0

IoTSF ESB - Quick actions
by John Moor Jan. 27, 2024

Jan. 27, 2024

Dear ESB Thank you to those who attended yesterday's meeting. The notes will follow shortly. As actioned, I’d like to get quick (by return if possible) thoughts/suggestions from each of you on 2 agenda items: 1. 10th Annual Conference – Oct 23rd, IET London * We’d like to make it special (the best yet) and would like to identify possible keynote speakers of international appeal/affiliation. i. We have made a request for the CTO of NCSC – Ollie Whitehouse, ex ESB member. ii. Who else would you suggest that would be a draw for a physical/livestreamed talk? Extra points if you can help us make an approach! 1. New ESB Members * Please also suggest people who you think would be good candidates to join the ESB. Look forward to your responses. KR., John Moor Managing Director, IoT Security Foundation Make it safe to connect: Build Secure – Buy Secure – Be Secure Take a look at our FREE downloads for developers, users and the security-minded organisation: * Our #1 Download: IoT Security Assurance Framework Release 3.0 * Our #2 Download: Secure By Design Best Practice Guides * Read Our Latest Market Research Report on Vulnerability Disclosure Practice (VDP). * IoT Security: Supply Chain Considerations and Software Bill of Materials (SBoM) * Release 2 Vulnerability Disclosure Guide * Consumer IoT security quick guides and training webinars * Smart Buildings: Cybersecurity for Facilities Professionals * Home / Enterprise / Healthcare Security Architectures All available at https://iotsecurityfoundation.org<https://iotsecurityfoundation.org/> Mobile: 07739 982327 - Head Office: +44 (0)1506 374 237

5 6