Skip to content

ACCA Strategic Professional · Strategic Business Leader · Enabling success: disruptive technologies

Tarvale Hotels installed smart thermostats and door locks in all its rooms, connected to the internet with the manufacturer's default passwords. A board member asks what the most significant new risk is. Which response is most appropriate?

The most significant risk is an enlarged attack surface. Internet-connected thermostats and locks using default passwords give attackers easy entry to the hotel network and potentially to guest rooms. Usability, storage cost and obsolescence are secondary concerns compared with this security and safety exposure.

  1. AThe main risk is that guests will find the devices hard to use, which is a usability issue only
  2. BThe devices enlarge the attack surface, so weak default credentials could let attackers access the network or physical roomsCorrect
  3. CThe risk is mainly that data storage costs will rise as readings accumulate
  4. DThe risk is limited to hardware obsolescence, as the devices will need replacing in time

Explanation

Connected devices with default passwords create entry points into the network and may allow physical access through the locks. This is a security and safety risk that outweighs the other issues, which are real but secondary. Governance should require credential changes, network segmentation and patching.

Did you get it right without looking?

One question tells you little. A timed set on Enabling success: disruptive technologies shows your real accuracy, how long you take and where you lose marks.

Practise Enabling success: disruptive technologiesFree diagnostic mock

More Enabling success: disruptive technologies questions