The Internet of Things
Understand what makes a device 'smart,' where IoT genuinely helps in a workplace, and the security problem these devices introduce.
By the end of this lesson you can
- Define the Internet of Things and give workplace examples
- Explain how an IoT device differs from a conventional appliance
- Identify the security risks IoT devices bring to a network
- Apply basic controls that reduce those risks
Lesson Notes
Read through the key concepts before you try the challenge.
A computer inside something that is not a computer
You manage office technology at Lakeside Medical Associates.
The practice installs a smart thermostat, two network cameras, a connected refrigerator monitoring vaccine temperatures, and a smart doorbell. Each solves a real problem. Each is also a small computer on the practice's network, running software that may never be updated, sitting on the same network as the systems holding patient records.
Your task: Understand what these devices are, so their benefits can be gained without opening the network.
The Internet of Things describes everyday objects with a processor, a network connection, and usually sensors — devices that collect and transmit data without anyone operating them. The vaccine refrigerator is the clearest example of why this matters in healthcare: it monitors temperature continuously and alerts staff before a temperature excursion spoils inventory, which is a genuinely better outcome than someone checking a dial twice a day.
| Device | Solves | Risk it brings |
|---|---|---|
| Vaccine refrigerator monitor | Continuous temperature logging and alerts before loss | Alerts depend on the network and the vendor's cloud being up |
| Smart thermostat | Energy cost and comfort scheduling | Often weak default credentials |
| Network cameras | Physical security and after-hours monitoring | A compromised camera is a live view inside the practice |
| Badge and door access | Controlled entry with an audit trail | A failure can lock staff out or let anyone in |
| Connected medical devices | Readings flowing straight into the record | Regulated; may transmit patient data |
| Control | Why |
|---|---|
| Change every default password at installation | Default credentials are published and are the most common way these devices are compromised |
| Put IoT devices on a separate network from workstations | A compromised device then cannot reach the systems holding patient records |
| Keep an inventory of every connected device | You cannot secure or patch what nobody has written down |
| Check whether the vendor still issues updates | An unsupported device is a permanent open vulnerability |
| Disable features you do not use | Remote access left enabled by default is a common entry point |
Why is a smart thermostat considered a meaningful security risk on a medical office network?
Challenge
Apply what you've learned in this lesson.
Inventory and assess, the way a practice should before adding devices.
- List every connected device in a home or workplace you know, including ones not normally thought of as computers.
- For three of them, find out whether the manufacturer still issues security updates. Note where you looked.
- Write a short IoT policy for a small medical office covering passwords, network placement, inventory, and end-of-support devices. Keep it to one page.
- Explain in three sentences why a compromised camera is more serious than a compromised thermostat, and why both still matter.
Finished this lesson?
Progress is saved in this browser only. It is not a grade — official progress lives in Brightspace.