https://www.etsi.org/newsroom/press-releases/1549-2019-02-etsi-releases-first-globally-applicable-standard-for-consumer-iot-security

• No universal default passwords
  
• Implement a means to manage reports of vulnerabilities
  
• Keep software updated
  
• Securely store credentials and security-sensitive data
  
• Communicate securely
  
• Minimize exposed attack surfaces
  
• Ensure software integrity
  
• Ensure that personal data is protected
  
• Make systems resilient to outages
  
• Examine system telemetry data
  
• Make it easy for consumers to delete personal data
  
• Make installation and maintenance of devices easy
  
• Validate input data