MIDASEC06-BP01 Use secure data exchange protocols
Use secure and standardized protocols for sharing industrial data internally and externally, helping protect integrity and confidentiality.
Desired outcome: Data is transmitted securely across different systems and organizations without unauthorized interception or tampering.
Benefits of establishing this best practice: Helps prevent data breaches, supports secure collaboration, and aligns with industry data exchange standards.
Level of risk exposed if this best practice is not established: High
Implementation guidance
Use MQTT over TLS, HTTPS, or OPC-UA with encryption and certificate-based authentication.
Implementation steps
-
Configure IoT and gateway devices to communicate over secure protocols.
-
Enforce TLS 1.2 or higher for all data-in-transit.
-
Implement endpoint authentication using certificates or tokens.
-
Monitor traffic for anomalies using AWS IoT Device Defender.
Resources
