I have been following the work that this group has been doing for some time now. There are other consortia looking into IoT security as well. This is a framework of best practices and none of it is binding. It will be up to IoT developers and facilitators to follow the recommendations. Currently it is much like putting up a sign on a large green area that says 'please, do not walk on the grass'. However, it is an excellent piece or work and the conclusions and recommendations will be invaluable in developing binding security standards. The elephant in the room right now is that these standards will not be retroactive when they are finally agreed to.
