Vendor Security Contact

LinkedIn Post 11: Vendor Security Contact

Do you know which vendors manufacture the IoT devices in your buildings?

Do you know their security contacts?

You should. When a vulnerability is announced, you need to be able to reach the vendor immediately to:

• Confirm which firmware versions are affected

• Get patch availability and timeline

• Understand impact on your installations

• Arrange for patch deployment

Create a contact list for every major device vendor. Subscribe to their security mailing lists. Make sure you're receiving advisories.

A missing security contact shouldn't delay your response to a critical vulnerability.

Build the infrastructure now, before you need it.

#PSTI #Vendor #VendorManagement #Security