Page 609 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

use, they are also a concern to every organization. This is partly
because of the use of mobile devices by employees within the

company’s facilities and even on the organizational network. Another
aspect of network professional concern is that many IoT or networked
automation devices are being added to the business environment. This
includes environmental controls, such as heating, ventilation, and air
conditioning (HVAC) management, air quality control, debris and
smoke detection, lighting controls, door automation, personnel and
asset tracking, and consumable inventory management and auto-

reordering (such as coffee, snacks, printer toner, paper, and other
office supplies). Thus, both smart devices and IoT devices are potential
elements of a modern business network that need appropriate security
management and oversight. For some additional reading on the
importance of proper security management of smart devices and IoT

equipment, please see “NIST Initiatives in IoT” at https://www
.nist.gov/itl/applied-cybersecurity/nist-initiatives-iot.