PADM 710 Discussion: Internet of Things Use Cases in Public Services, Home Use and Cybersecurity Risks

PADM 710 Discussion: The Internet of Things in Public Administration

Think about how you and your family use the Internet of Things (IoT): phones, computers and tablets, but also cars, appliances, locks, garage doors and security cameras. IoT has powerful implications for public policy, public expectations and the delivery of public services, and billions of connected devices create ethics and security challenges. Use these questions as section headings:

1. What are several use cases of how IoT technologies are enhancing the administration and delivery of public services (for example, healthcare, education, agriculture, law enforcement, transportation, homes and smart cities)?
2. How are you using IoT in your work and your home?
3. What are the challenges and risks of IoT devices on the agency’s network, your personal network or the coffee shop’s? How can we prevent or minimize them? How are you helping your family be cybersecure?

We have moved from “clicks in bricks” to “clicks outside bricks.” How does that affect the security of data in motion? Remember the weakest link in a chain.

Original example for study purposes (about 830 words). Section 2 is a sample household and workplace; replace it with your own devices and job.

1. How IoT Technologies Are Enhancing Public Services

• Transportation and smart cities: adaptive traffic signals use cameras and road sensors to adjust timing to real traffic, reducing congestion and emissions. Connected parking sensors, transit vehicle location feeds and smart streetlights that dim when streets are empty help cities manage assets and save energy.
• Utilities and environment: smart water meters report usage frequently, allowing utilities to detect leaks and bill accurately without manual reads. Air quality and flood sensors give emergency managers early warning.
• Healthcare: remote patient monitoring devices, such as connected blood pressure cuffs and glucose meters, send readings to clinicians so public hospitals and Medicaid programs can manage chronic disease at home and reduce readmissions.
• Agriculture: soil moisture sensors and connected irrigation help farmers and agricultural extension programs conserve water, while sensors on livestock and storage facilities support food safety.
• Law enforcement and public safety: body-worn cameras, vehicle telematics and connected fire and gunshot detection systems improve situational awareness and accountability, though they raise privacy and civil liberties questions that require clear policy.
• Education: connected building systems manage heating and security in schools, and lending programs for hotspots and devices extend learning to students without home internet.

Each use case raises public expectations: once residents can track a bus in real time, they expect the same responsiveness from other services. Agencies must therefore plan for funding, data governance and equity so that benefits reach all communities.

2. How I Use IoT at Work and at Home

[Sample; replace with your own.] At home, our household has about 22 connected devices: three phones, two laptops, two tablets, a smart TV and streaming stick, a smart thermostat, a video doorbell, two security cameras, a smart speaker, a connected car, a smart garage door opener, a printer, a fitness watch and a Wi-Fi mesh system. Counting them was surprising, because several, such as the garage opener and printer, rarely receive attention or updates. At work, my agency uses badge readers, networked printers, building energy management sensors, GPS units in fleet vehicles and laptops that connect remotely to the agency network through a VPN. Field staff also use tablets to collect inspection data outside the office.

3. Challenges, Risks and Prevention

Challenges and risks. Many IoT devices ship with default passwords, weak encryption and firmware that is rarely updated, which makes them easy entry points for attackers. Compromised devices can be enlisted in botnets, used to spy through cameras and microphones or used to move laterally to computers on the same network. Agencies face additional risks: an insecure building sensor or printer on a flat network can expose sensitive systems, and large volumes of sensor data about residents create privacy obligations. Public Wi-Fi in coffee shops and airports adds the risk of rogue access points and interception, especially when users connect work devices without protection.

Prevention and mitigation.

• Buy secure devices: agencies can require baseline device capabilities, such as unique identifiers, secure updates and configurable access controls, drawing on NIST’s IoT device cybersecurity guidance (Fagan et al., 2020). Consumers can look for the FCC’s U.S. Cyber Trust Mark, a voluntary cybersecurity label for smart products announced in January 2025 (Federal Communications Commission, n.d.).
• Segment networks: place IoT devices on separate network segments or guest networks so a compromised camera cannot reach laptops or agency databases.
• Change defaults and patch: replace default passwords, enable automatic updates and retire devices that no longer receive security support.
• Inventory and monitor: agencies cannot protect devices they do not know about, so asset inventories and network monitoring are essential.
• Train people: employees and family members are often the weakest link, through phishing, reused passwords or connecting to unknown Wi-Fi.

Helping my family be cybersecure. [Sample.] We use a password manager and multi-factor authentication on email and banking, keep smart home devices on a separate guest network, turn on automatic updates and review camera and app permissions twice a year. I also taught my children to avoid public Wi-Fi for anything sensitive and to ask before installing new apps.

From “Clicks in Bricks” to “Clicks Outside Bricks”: Data in Motion

When employees worked inside agency buildings, data traveled mostly over networks the agency controlled. Now employees connect from homes, hotels and coffee shops, so data in motion crosses networks the agency neither owns nor monitors, and the traditional security perimeter no longer exists. A home router with an outdated password or a malicious hotspot can become the weakest link in the chain. The response is a zero trust approach, which assumes no network is trusted and verifies every user, device and request (Rose et al., 2020). In practice, this means encrypting all data in transit with TLS and VPN or secure access service edge tools, requiring multi-factor authentication, checking device health before granting access, applying least-privilege permissions and logging access for review. By securing each link, from the employee’s home router to the agency’s cloud applications, agencies can support remote public service without weakening the whole chain.

References

Fagan, M., Megas, K. N., Scarfone, K., & Smith, M. (2020). IoT device cybersecurity capability core baseline (NISTIR 8259A). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.IR.8259A

Federal Communications Commission. (n.d.). U.S. Cyber Trust Mark. https://www.fcc.gov/CyberTrustMark

Rose, S., Borchert, O., Mitchell, S., & Connelly, S. (2020). Zero trust architecture (NIST Special Publication 800-207). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-207

More model assignments posted today

• Walmart culture transformation diagnosis
• Interprofessional evidence translation (DNP)
• Balancing cost and performance in cloud design
• PADM 702 exponential smoothing paper
• WACC SLP example (Coca-Cola)
• Ethical decisions in medical records paper