The headline seems a bit deceptive. No basic standard is set for IoT security, the government just started demanding a certain quality for their own purchases o

The headline seems a bit deceptive. No basic standard is set for IoT security, the government just started demanding a certain quality for their own purchases of IoT devices (i.e. not buying just any old IoT device): > The IoT Cybersecurity Improvement Act of 2017 seeks to use the government’s buying power to signal the basic level of security that IoT devices sold to Uncle Sam will need to have.