ABSTRACT

Cybersecurity is always one of the top priorities for any organization and network in order to provide smooth services and operations. The Artificial Internet of Things (AIoT) is one of the new and developing areas where the traditional standards and policies implementation is a significant challenge. ISO-27001 is an international standard that lays out a specification for an Information Security Management System (ISMS). This standard aims to address data security by focusing on people, processes, and technology. The standard has a heavy focus on its risk-assessment approach which stipulates that a risk assessment must be carried out before any controls can be selected and implemented. This standard follows a Plan-Do-Check-Act model and has an independently accredited certification to align the ISMS with information security best practices. Some other well-known standards such as ISO 27002, ISO 38500, COBIT/COBIT 5, PRINCE2, and NIST CSF are under discussion, especially for AIoT networks. This chapter discusses the existing standards and policies designed for Cyber-Physical Systems (CPS) in AIoT networks. This chapter also discusses security vulnerabilities and privacy threats and presents security and privacy solutions/architectures that improve the security and privacy of CPS in AIoT Networks.