# IoT Technologies during and Beyond COVID-19: A Comprehensive Review
## 7 Emerging Code of Practices for IoT  
There are some codes of practices for IoT that provides guidelines and steps for both the manufacturer and the consumers to improve and protect security and privacy. These guidelines mitigate security threats such as DDoS. The author of [87] provides the following standard and recommended practices that assist in achieving compliance with the General Data Protection Regulation (GDPR) to different IoT applications, such as wearable health trackers, smart homes, home automation, smart cameras, and alarm systems. * No default passwords
* Vulnerability disclosure policy implementation
* Continuous and periodic updates, secure storage for sensitive and personal data
* Make it easy for consumers to delete personal data
* Software integrity  
The U.S. Department of Homeland Security has also created a strategic principle for securing IoT, as there are many different engaged parties to this security shortfall, such as manufacturers, suppliers, deployers, and network operators, which makes it unclear as to who is responsible for security decisions [88]. The principles to address IoT security challenges are incorporating security in the design phase, advancing security updates and vulnerability management, building on proven security practices, prioritizing security measures according to potential impact, promoting transparency across IoT, and connecting carefully and deliberately. These suggested practices will help to account for security for IoT developers, service providers, IoT manufacturers, and industrial and business level consumers. In addition, the security of IoT devices will help to improve the quality of commercial services and control the connection with wireless infrastructure. This process offers a significant amount of automation and security control. ISO (International Organization for Standardization), with the IEC (International Electrotechnical Commission), published the ISO/IEC TR 30164 IoT standard that describes the concepts and technologies of edge computing for IoT, the ISO/IEC 21823-2 IoT standard that specifies an interoperability framework for IoT systems, and the ISO/IEC TR 30166, which is an IoT standard for Industrial IoT (IIoT). These best practices proposed by international organizations immensely help to securely operate the IoT end-to-end chain. Furthermore, it can be observed that specific industries are also producing their own standards to provide better safety and cyber security for their systems. For example, the recent TISAX: Trusted Information Security Assessment eXchange standard provides required cyber security best practice guidelines (securing the supply chain) for the automotive industry (ENX Association, 2021) [89]. This is particularly important for automotive IoT systems since compromised cyber security system could have an adverse impact on its safety. It is crucial for driverless cars to operate within safety guidelines while talking to nearby cars (e.g., vehicle-to-vehicle communication) and responding to sensor readings in real time. Adhering to best practice guidelines also helps organizations to demonstrate compliance to regulations and laws (e.g., ISO27001 standard facilitates GDPR compliance). For instance, EU Network & Information Systems Regulations (NIS Regulations) provides legal measures to boost the overall level of security (both cyber and physical resilience) of network and information systems that are critical for the provision of digital services (online marketplaces, online search engines, cloud computing services) and essential services (transport, energy, water, health, and digital infrastructure services). This was introduced as critical enablers of our societies and economies are increasingly underpinned by the internet and private networks and information systems. Hence, it is important to ensure a high common level of network and information security (NIS).