AppSec Europe 2018

This talk will take GDPR compliance away from just the data operator and data controller and show how all stakeholders have a role to play in IoT device security and compliance. The device this talk will focus on are those related to smart buildings, smart cities, etc.
The talk will consider secure by design, privacy by design, secure procurement, secure installation, and secure configuration.
This talk will be based on some of the content from a White Paper I'm writing, to be available in early May, before the EU GDPR is due to be enforced.
As this talk is based on a White Paper, I can adapt it as necessary, but I believe that the focus should deviate from the fact that every stakeholder involved in supplying corporate organisations with "smart" solutions has a role to play in ensuring that not only is the solution secure at manufacture but has been installed and configured correctly for the environment it is operating in.