IoT security challenges: massive scale, diverse devices, long lifecycles, limited compute, default credentials, infrequent patching, insecure communications.
Network segmentation (IoT VLAN) is the most practical IoT security control. Mirai botnet demonstrated IoT's DDoS potential. NIST SP 800-213 provides IoT security guidance. Inventory ALL IoT devices.