ChaptersEventsBlog
We're exploring how organizations adapt IAM to AI. Take the AI Identity and Risk Readiness Survey by September 5 →

Working Group

Internet of Things

This working group focuses on understanding the relevant use cases for IoT deployments and defining actionable guidance for security practitioners to secure their implementations.
View Current Projects
Guide to the IoT Controls Matrix v3
Guide to the IoT Controls Matrix v3

Download

Internet of Things
Internet of Things | Working Group Overview
This working group focuses on understanding the relevant use cases for IoT deployments and defining actionable guidance for security practitioners to secure their implementations. We welcome anyone who would like to join, even if you would like to just listen-in on your first call. 

What do we discuss? 
During these meetings we typically discuss changes in the industry and collaborate on projects the group is currently working on.

Drafts & Important Docs

Working Group Leadership

Brian Russell
Brian Russell

Brian Russell

Brian Russell is co-author of the book “Practical Internet of Things Security” and is a Chief Engineer focused on Cyber Security Solutions for Leidos (www.leidos.com). He oversees the design and development of security solutions and the implementation of privacy and trust controls for customers. Brian leads efforts that include security engineering for Unmanned Aerial Systems (UAS) and Connected Cars, and the development of hig...

Read more

Senthil Chandrasekaran
Senthil Chandrasekaran

Senthil Chandrasekaran

Senthil is a proven security product leader focused on building products that focus on customer trust without compromising user experience, and safety. He has over 15+ years of experience in cybersecurity in security engineering and operations, advisory, and security product management. Over the years, he has worked with F500 companies, technology firms, and startups on various domains within cybersecurity and currently leading the security...

Read more

Vaibhav Sharma
Vaibhav Sharma

Vaibhav Sharma

AVP Cyber Security, TÜV SÜD

Vaibhav is working in industrial cyber security from last 18 years. Senior Member for ISA Working Groups and standard committee. Strengths in Cloud security, risk Advisory Consulting, Operation Risk Assessments, program management, design & implementation specialist for project controls.

Strong industry experience with technical, communication & delivery skills in green field, brown field & migrations project acro...

Read more

Publications in ReviewOpen Until
Data Security within AI EnvironmentsAug 29, 2025
AICM Auditing GuidelinesSep 03, 2025
A Practitioner’s Guide to Post-Quantum CryptographySep 17, 2025
Cloud Threat Modeling 2025Sep 19, 2025
View all
Who can join?

Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.

What is the time commitment?

The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.

Virtual Meetings

Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.

Open Peer Reviews

Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.

Learn how to participate in a peer review here.

Data Security within AI Environments

Open Until: 08/29/2025

 AI’s demand for large and diverse datasets introduces significant cybersecurity risks across the entire data lifecycl...

AICM Auditing Guidelines

Open Until: 09/03/2025

Auditing steps for each of the 243 controls of the AI Controls Matrix for internal or external auditors that are going to e...

A Practitioner’s Guide to Post-Quantum Cryptography

Open Until: 09/17/2025

As quantum computing advances, the threat it poses to classical cryptographic algorithms becomes increasingly urgent. This ...

Cloud Threat Modeling 2025

Open Until: 09/19/2025

The purpose of this document is to enable and encourage effective threat modeling for cloud applications, services, and sec...