mriguy

Lot of what you say rings true. I am involved in a project right now where the team members are trying to do the right thing from a development point of view. However the bureaucracy of centralized information security folks and paperwork based approach of the quality and regulatory folks makes it painful. Hence reaching out to this forum to see if anyone has a good experience of doing it right.

Good point. Some of the uniqueness is because some of these devices have been developed before considering connectivity, and in many cases, the network features are "bolted on". Are there any good best practices documentation regarding IoT device security, especially when considering regulatory filings or compliance requirements.

You are right about the laws influencing child labor, however they are not a sufficient condition. There also needs to be a corresponding increase in returns to child education over and above returns from labor in order for child labor to vanish. For example: India has very strong laws, however child labor still exists.