Schneier: It's Time to Regulate IoT to Improve Cyber-Security
I don&#x27;t think that government certification is the answer here. This will turn security into a check-mark. Companies will do the bare minimum to get certified and won&#x27;t invest a penny more. This would solve some of the more extreme cases we see, but I doubt it&#x27;ll make a real impact.<p>Instead, I feel that accountability would work much better here. If you&#x27;re selling an IoT device, and you haven&#x27;t taken industry standard precautions for securing it, then you&#x27;re on the hook for whatever your device is used for. The same can be applies to companies storing personal information e.g. Equifax.