Internet of Things (IoT) and Operational Technology (OT) Supplemental Security Standards — New Jersey DOT

Overview

The New Jersey Department of Transportation (NJDOT) developed supplemental security standards for the Internet of Things (IoT) and Operational Technology (OT) devices that support its transportation operations. Building on the NJ Statewide Information Security Manual, the guidance establishes a unified, State-aligned approach to securing connected devices and networks across the Department. It sets actionable best practices in unified device management, network security, access control, and configuration hardening for every stakeholder involved in deploying and overseeing IoT and OT technologies. By consolidating device management onto a single platform and standardizing security settings, NJDOT reduces the risk of unauthorized access, data breaches, and other security incidents while safeguarding the confidentiality, integrity, and availability of its critical infrastructure.

In this case study you will learn: 

  1. Why IoT and OT technologies require supplemental security standards tailored beyond standard IT security policies.
  2. How NJDOT structured its guidance around unified device management, network security, access control, and proper device configuration.
  3. How centralizing device management and standardizing configurations strengthens the Department's overall security posture.