EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. How EY can help - Discover how EY's Cybersecurity Transformation solution can help your organization design, deliver, and maintain cybersecurity programs. Read more The Internet of Things (IoT) is often associated with connected home devices, from closed circuit television (CCTV) systems to appliances such as air conditioning units. However, the use of sensors and smart devices extends far beyond home. Today, IoT is embedded across industries, from defense and healthcare to the critical infrastructure that underpins industrial societies enabling large-scale, interconnected systems. In today’s environment, particularly in the energy sector, industrial facilities are increasingly embedded with connected devices. They enable early identification of potential failures and preventative maintenance activities. These technologies also support condition and corrosion monitoring, real-time performance optimization, sustainability management, safety monitoring as well as remote oversight of equipment, both onshore and offshore. IoT devices can function independently or as part of interconnected systems across broader networks. These capabilities are no longer optional, they are becoming essential to everyday operations, driving cost and efficiency savings. This, in turn, enables better data-driven decisions leveraging both historical and real-time data while supporting predictive capabilities. However, IoT and industrial IoT (IIoT) devices often lack advanced security capabilities commonly found in personal computers or mobile devices1. When connected to mission critical systems, they can become the weakest link in the security chain, creating an attractive target for both state and non-state actors. IoT and IIoT are expanding the cyber attack surface IIoT is now deeply embedded across sectors such as oil and gas, utilities,