Forescout Enterprise of Things Security Report 2020 One-Pager

Forescout

Security Research / Device Cloud Analytics / Kibana & Elastic Analyst Contributor

Context

Contributed to Forescout's Enterprise of Things Security Report research, using Device Cloud analytics and Elastic/Kibana-style workflows to help identify and frame the riskiest IoT and connected devices across major enterprise verticals. Contributed to Enterprise of Things research and report work at Forescout, helping frame the security implications of unmanaged, IoT, OT, and connected devices as enterprise attack surfaces requiring visibility, classification, segmentation, monitoring, policy, and response.

Problem

Enterprises were rapidly filling with connected devices that were not managed like traditional endpoints. Security teams needed to know which device types carried the highest risk, how IoT devices created attack paths, and why enterprise security programs needed continuous visibility and control across more than laptops, servers, and managed IT assets. Enterprises increasingly depend on connected devices that are not managed like traditional endpoints: IoT devices, OT systems, medical devices, printers, cameras, collaboration systems, building systems, and specialized equipment. These assets often lack strong inventory, patching, segmentation, monitoring, and ownership, creating blind spots that attackers can exploit.

What I did

• - Supported Enterprise of Things research using Forescout Device Cloud analytics and device-intelligence workflows.
• - Used Elastic/Kibana-style analysis to query, segment, classify, and interpret large-scale device telemetry.
• - Helped examine connected-device populations across financial services, government, healthcare, manufacturing, and retail sectors.
• - Contributed to risk framing around the top riskiest IoT and connected-device categories.
• - Helped translate technical device data into executive and practitioner-facing security findings.
• - Connected device visibility to practical control themes such as segmentation, monitoring, policy enforcement, vulnerability management, and prioritization.
• - Supported a report narrative that treated IoT devices as active enterprise attack surfaces rather than background infrastructure.
• - Helped connect Device Cloud analytics to customer-facing, sales-facing, and market-education messaging.
• - Contributed to the broader Forescout Enterprise of Things story: organizations must identify, segment, enforce compliance, and monitor every connected thing.
• - Carried forward this evidence-first model into later AI security work, where inventory, risk scoring, and control evidence play the same foundational role.
• - Supported research and narrative development around the Enterprise of Things security problem.
• - Helped frame unmanaged, IoT, OT, and connected devices as active enterprise attack surfaces.
• - Connected asset visibility, classification, segmentation, monitoring, policy enforcement, and response to practical risk reduction.
• - Translated technical device-security issues into executive and practitioner-friendly security language.
• - Contributed to market education about device diversity and the limitations of traditional endpoint-centric security assumptions.
• - Helped explain why organizations need to know what is connected before they can defend it.
• - Connected device-security risk to product security, vulnerability response, rapid response, and offensive research lessons.
• - Supported the shift from device inventory as an IT hygiene task to inventory as a security control.
• - Developed themes that later carried into AI product-security work, especially inventory as the first control and governance evidence as a security operating requirement.
• - Contributed to a research asset that could support customer conversations, analyst education, sales enablement, and public thought leadership.

Outcome

• - Helped produce a public Enterprise of Things research asset grounded in Forescout Device Cloud data.
• - Supported market education around the riskiest IoT and connected-device categories in enterprise networks.
• - Helped position Device Cloud analytics as a source of cross-industry connected-device risk intelligence.
• - Created a research narrative useful to CISOs, security practitioners, sales teams, customer-facing teams, analysts, and buyers.
• - Built experience translating large-scale connected-device telemetry into security-report findings and executive-ready risk narratives.
• - Established a durable portfolio story around risk analytics, IoT security, data-driven research, and enterprise security evidence.
• - Helped articulate the Enterprise of Things as a security category and executive risk narrative.
• - Supported a report that educated the market on unmanaged connected-device risk.
• - Strengthened the connection between device visibility, segmentation, monitoring, control, and enterprise risk reduction.
• - Created a public-facing research narrative that bridged technical security and business understanding.
• - Built experience turning complex technical security domains into credible research and market education.
• - Established a foundation for later AI-security research products, where the same pattern applies: name the emerging risk, define the control model, and give teams a path to action.

Evidence

• - Forescout's public report page states that the Enterprise of Things Security Report analyzed data from over 8 million devices.
• - Forescout's public report page states the report covered deployments across financial services, government, healthcare, manufacturing, and retail.
• - Forescout's public report page says the data came from Device Cloud, described as one of the world's largest repositories of connected-device data.
• - Forescout's public threat/report archive lists Enterprise of Things Security Report: The State of IoT Security in 2020 and describes it as identifying the top 10 riskiest devices.
• - User-provided contribution context: research was sourced through Forescout Device Cloud and analyzed through Kibana/Elastic-style workflows, with the user describing himself as a Kibana/Elastic certified analyst.
• - Public-safe metric language; exact dashboards, queries, customer names, internal datasets, proprietary Device Cloud schemas, private drafts, and unpublished analysis details are omitted.
• - Contributed to Enterprise of Things report work at Forescout.
• - Focused on unmanaged, IoT, OT, and connected-device security risk across enterprise environments.
• - Helped frame visibility, classification, segmentation, monitoring, and policy as security controls for diverse device estates.
• - Public-safe metric language; exact report authorship details, private datasets, internal drafts, proprietary research methods, customer examples, and unpublished findings are omitted.