Home » News and Events » Bruce Schneier: Real IoT security can only be achieved through regulation by the government

Bruce Schneier: Real IoT security can only be achieved through regulation by the government

At the Aspen Cyber Summit on November 8, 2018, the cybersecurity guru Bruce Schneier emphasized the need of penalties by the government to ensure people’s safety online.

During a panel discussion at the Aspen Cyber Summit, renowned technologist Bruce Schneier argued that without government regulation, there is little likelihood that the security of companies will be protected. “Looking at every other industry, we don’t get security unless it is done by the government,” said Schneier. “I challenge you to find an industry in the last 100 years that has improved security without being told by the government.” His opinion was supported by other panelists, including Johnson & Johnson CISO Marene Allison. He added the problem of lacking information transparency existing between businesses and customers about how their data is processed and used. Moreover, a number of logistical hurdles in the process of data security will arise both short and long term.

“The lifespan for consumer goods is much more than our phones and computers, this is a very different way of maintaining lifecycle,” Schneier said. “We have no way of maintaining consumer software for 40 years.”

The IoT security question can only be answered by the government, but, as the panelists noted, any long-term solution will require a shift in culture and perception from manufacturers, retailers and consumers.

Photo: Security Expert Bruce Schneier

Bruce Schneier is an internationally renowned security technologist, a “security guru” according the Economist. He is also the author of 14 books on general security topics, computer security and cryptography. In 2015, Schneier was honored as the Business Leader in Cybersecurity Award by Boston Global Forum (BGF) for dedicating his career to the betterment of technology security and privacy during Global Cybersecurity Day, which is observed on December 12 annually.

In 2018, the Fourth Annual Global Cybersecurity Day Symposium will be held at Harvard University. The theme of this year revolves around the current state of cyber issues and the threat posed by disinformation, as well as effective defense mechanisms (by Artificial Intelligence – AI) against these activities. Delegates, cybersecurity leaders, and other citizens of the world who participate in the day’s programs will be linked together online in real time.