# The Use of the Internet of Things in the Distribution Logistics of Consumables
## 1 Introduction
### IoT Security Challenges  
However, many authors also point to the pitfalls of using IoT and ask whether we are mentally prepared for such extensive use of IoT in practice and whether the legislation in the field of its use is sufficiently set [15]. The authors [PERSON] and [PERSON] state in their publication that one of the aspects is the physical security of devices, since physical access to devices can allow unauthorized persons to manipulate them [16]. This mainly concerns the threats of theft, sabotage, or physical damage to the equipment itself. Currently, these threats are solved by placing devices in inaccessible places or by monitoring these devices using camera systems or a guard service. Another important aspect of security is communication protection, which includes secure communication between individual IoT devices and cloud servers [17]. These threats include eavesdropping, man-in-the-middle attacks, and data falsification, which compromise the confidentiality and integrity of transmitted data [18]. Other authors describe the solution of managing identities and access rights as an important task, using various technologies and procedures. These include, for example, identification and authentication, securing communication protocols, defining access rights, and their regular revocation. We ensure that only authorized persons have access to important data sources [19]. The devices are part of the secure networks through which they communicate. Here the question is whether their integration with these networks using firewalls is sufficient and secure [20]. In many cases, IoT devices are being misused to create botnets (networks of compromised devices) for mass cyberattacks. There are many types of cyberattacks that can target different aspects of information security and cybersecurity. The most common cyberattacks include malware (infecting a device with a harmful virus), phishing (obtaining sensitive information such as passwords, and personal or bank details), DoS and DDoS (overwhelming a network or target system, leading to unavailability of services), Man-in-the-Middle attacks (modification of communication between two parties by a third party), SQL injection, spoofing, and many others. There is therefore an imperative to protect against the misuse of devices for these cyberattacks through standardization and compliance, which help create uniform practices and minimize security risks [21]. Organizations should monitor and adapt to current security standards and regulations. Therefore, they create risk assessment methodologies. Figure 3 shows an example of the risk assessment methodology. The human factor can be the weak link in IoT. Users and administrators should be familiar with IoT security practices and certifications to minimize human risks. In further development, the creation of standards and interoperability in IoT is inevitable, as they enable effective integration and cooperation within the entire ecosystem. Industry, standardization organizations, and government institutions should work together to create open, secure, and interoperable standards [22]. With the gradual development of information technologies, normative frameworks and standards have also evolved, helping organizations and entities create and implement effective strategies for information security and data protection in accordance with international practices and legal requirements. Compliance with these standards is important to ensure the credibility, integrity, and confidentiality of information, and to reduce risks associated with cyber threats and data breaches. Some of the most well-known normative frameworks and standards include:  
* ISO/IEC 27001: This standard defines requirements for information security management in organizations. It includes a set of controls and procedures that organizations can implement to ensure an adequate level of information security. * ISO/IEC 27002: This document provides a detailed set of recommendations for managing information security.