← Engineering Library
Cybersecurity
Residential cybersecurity baseline
The security baseline every Smart Citizens installation ships with — protecting the home network and cloud accounts.
Best practices
- Segment IoT from personal devices
- Rotate PSKs annually
- Review third-party integrations quarterly
Common mistakes
- Port-forwarding to expose services publicly
- Sharing one admin account across the household
- Leaving default credentials on cameras
Engineering checklist
- Router + AP firmware on latest stable
- Default credentials changed everywhere
- IoT devices on separate VLAN
- Owner accounts protected with MFA
- Remote access via encrypted tunnel, not port-forwarding
- Camera streams encrypted end-to-end
Recommended workflow
- Baseline hardening at commissioning
- MFA onboarding for every user
- Quarterly security review
- Annual credential rotation
Related standards
NIST 800-213 (IoT baseline)
OWASP IoT Top 10