IoT risk mitigation