Global AppSec DC 2019

Senate Bill 327 sets a new standard for the security and privacy of connected devices. It will come into force in January 2020. The way connected devices are defined in this bill is broad. The effect of the law is not limited to a state since it is not justifiable, or in many cases feasible, for a typical manufacturer to launch different products in different geo-locations within a country. During the talk, several questions around the scope and applicability of the law are rigorously analyzed and answered after careful examination of the possible scenarios and products. The talk presents categories of 'appropriate' security features to take into consideration, and provides a taxonomy of security controls applicable in various cases and scenarios. The audience will leave the talk with practical steps and guidelines as of how they can comply with the regulation.