Home → Best Practices → Network Security → 3rd Party Vendor Equipment

1.11. 3rd Party Vendor Equipment

Example would include: HVAC, Lighting, IoT, Clocks

• Must Have Practices

  • Don’t use default credentials

  • Document the equipment that is connected to the network

  • Secure protocols between devices and mgmt systems

• Best Practices

  • Use vlan segmentation with ACLs to control access

  • Firmware updates for security vulnerabilities if available.