CIoTSP study guide
CIoTSP · Work through your exam, one topic at a time.
The Certified Internet of Things Security Practitioner (CIoTSP) is an independent, vendor-neutral credential for professionals who secure connected devices and the systems around them. It suits security analysts, network and cloud engineers, embedded developers, and OT/IT staff moving into IoT security. The CIoTSP study guide has 8 sections and about 3,403 words.
01IoT Architecture and Security Fundamentals
Domain 1 asks you to read an IoT deployment as a layered system and to justify where each control sits. Items typically present a topology - sensors, gateways, edge nodes, cloud services, operator apps - and ask which boundary is weakest or which control belongs at which tier.
442 words, about 2 min02IoT Device Security and Hardening
Domain 2 tests whether you can harden a specific device - camera, sensor tag, gateway, PLC - across hardware, firmware and configuration, and defend each change against that device's operational constraints. Immutable root of trust in mask ROM or a secure element (TPM 2.0, ATECC, DICE CDI) verifies the first-stage bootloader.
404 words, about 2 min03IoT Network and Communication Security
Domain 3 covers the protocols IoT actually runs and the network controls that keep them trustworthy when defaults are weak and devices cannot be patched. MQTT: broker-mediated publish/subscribe.
412 words, about 2 min04IoT Identity, Access, and Key Management
Domain 4 is about knowing exactly who a device is, what it may do, and how its secrets are created, stored, rotated and revoked across a fleet of thousands. IEEE 802.1AR DevID: a per-device X.509 identity installed at manufacture; the reference model for IoT device certificates.
425 words, about 2 min05IoT Data Security and Privacy
Domain 5 covers the telemetry itself: classifying it, protecting it in each state, and keeping identifiable information out of places it does not belong. In transit: TLS 1.2+ or DTLS for UDP, mutual authentication, and payload-level encryption (OSCORE, COSE) whenever an intermediary terminates transport security.
444 words, about 2 min06IoT Cloud and Edge Security
Domain 6 tests how responsibility splits between the IoT platform and the customer, and what changes when compute moves to a physically exposed edge. The provider secures physical infrastructure, hypervisor and managed-service availability.
415 words, about 2 min07IoT Threat Modeling, Risk, and Vulnerability Management
Domain 7 asks you to reason systematically about what can go wrong in an IoT system and to prioritise fixes when patching is slow or impossible. STRIDE per element and per trust boundary: Spoofing (device identity), Tampering (firmware, telemetry), Repudiation (weak logging), Information disclosure (plaintext MQTT), Denial of service (battery or bandwidth exhaustion), Elevation of privilege (gateway into cloud).
414 words, about 2 min08IoT Incident Response, Monitoring, and Governance
Domain 8 covers detecting an IoT compromise, containing it without destroying evidence or the process, and the governance that makes both repeatable across a fleet. IoT telemetry is small and periodic, which makes baselining unusually effective.
447 words, about 2 min