Prioritize the encryption of data in transit only, as it is the most critical aspect of IoT security, and assume that physical security measures are adequately handled by the operational teams.

Apply a uniform set of security measures across all devices, including firewalls and antivirus software, to ensure consistency in security posture regardless of device type or location.

Conduct a thorough risk assessment for each type of IoT device and embedded system, considering factors such as the sensitivity of data, potential attack vectors, and environmental risks, to tailor security measures accordingly.

Delay the deployment of IoT devices and embedded systems until industry-wide security standards are established and universally adopted to eliminate the need for custom security measures.