# IoT Security Risk Management Strategy Reference Model (IoTSRM2)
## 2 Materials and Methods
### Overview of IoT Security Best Practices
\begin{table}
\begin{tabular}{l l l} \hline \hline \multicolumn{1}{c}{**Publisher**} & \multicolumn{1}{c}{**Name**} & \multicolumn{1}{c}{**Reference**} \\ \hline AgeLight LLC & IoT Safety Architecture and Risk Toolkit v4.0 & [40] \\ \hline Alliance for Internet of Things & Report on Workshop on Security and Privacy in the & [41] \\ Innovation (AIOTI) & Hyper-Connected World & [42] \\ \hline Australian Government & Code of Practice Securing the Internet of Things & [43] \\ \hline Broadband Internet Technical Advisory & Internet of Things (IoT) Security and & [44] \\ Group (BITAG) & Privacy Recommendations & [44] \\ \hline Cloud Security Alliance (CSA) & Security Guidance for Early Adopters of the Internet & [45] \\ \hline Cloud Security Alliance (CSA) & Identity and Access Management for the Internet of & [46] \\  & Things—Summary Guidance & \\ \hline Cloud Security Alliance (CSA) & CSA IoT Security Controls Framework Version 1 & [47] \\ \hline Council to Secure the Digital Economy (CSDE) & The C2 Consensus on IoT Device Security & [27] \\ \hline European Telecommunications Standards & ETSI European Standard (EN) 303.645 V2.1.1 Cyber & \\ Institute (ETSI) & Security for Consumer Internet of Things: & [31] \\  & Baseline Requirements & \\ \hline GSM Association (GSMA) & GSMA IoT Security Assessment Checklist & [48] \\  & Version 3.0 & \\ \hline Industrial Internet Consortium (IIC) & Industrial Internet of Things Volume G4: & [49] \\ \hline Institute of Electrical and Electronics & Internet of Things (IoT) Security Best Practices & [50] \\ Engineers (IEEE) & \multicolumn{1}{c}{} & \\ \hline IoT Security Foundation (IoTSF) & IoT Security Compliance Framework Release 2.1 & [51] \\ \hline Japan’s IoT Acceleration Consortium (IoTAC) & IoT Security Guidelines Ver. 1.0 & [52] \\ \hline National Electrical Manufactuers & Cyber Hygiene Best Practices & [53] \\ Association (NEMA) & \multicolumn{1}{c}{} & \\ \hline National Institute of Standards and & Foundational Cybersecurity Activities for IoT & [54] \\ Technology (NIST) & Device Manufactuers & \\ \hline Online Trust Alliance (OTA) & IoT Security \& Privacy Trust Framework v2.5 & [55] \\ \hline \hline \end{tabular}
\end{table} 
Table 1: Selected IoT security best practices. Furthermore, Figure 1 illustrates our proposed taxonomic hierarchy for classifying the 25 selected IoT security best practices, which emerged from the review of these IoT security best practices. Our taxonomic hierarchy aims to classify the selected best practices based on their applicability to specific groups of target audience and type of IoT security best practice. Thus, the selected IoT security best practices are grouped into the four categories below based on their applicability to specific groups of target audience:  
* **Adopter specific:** this category denotes IoT security best practices that are applicable primarily to IoT adopters;
* **General**: this category denotes IoT security best practices that are applicable to IoT adopters, IoT manufacturers, and/or IoT suppliers;
* **Manufacturer specific:** this category denotes IoT security best practices that are applicable primarily to IoT manufacturers;
* **Supplier specific:** this category denotes IoT security best practices that are applicable primarily to IoT suppliers.