Dark Reading has a new article on IoT security, with a 9-part checklist for IoT entrepreneurs to read:
#1. Begin at the beginning to reduce attack points
#2. Authentication & authorization
#3. Encryption
#4. Privacy
#5. Consumer awareness
#6. Security testing: digital & physical
#7. Third-party testing
#8. Internet-enabled security software updates and vulnerability management
#9. Security analytics to detect intrusion
Full checklist:
http://www.darkreading.com/iot/iot-security-checklist-get-ahead-of-the-curve/a/d-id/1324513
Firmware Security 