The first bullet "The device can identify and monitor for organizationally defined cybersecurity events (e.g., expected state change) that may occur on or involving the IOT device" should remain at its current level.
The 8 next bullets should all be indented to become sub-bullets of this first bullet.
The first bullet "The device can identify and monitor for organizationally defined cybersecurity events (e.g., expected state change) that may occur on or involving the IOT device" should remain at its current level. The 8 next bullets should all be indented to become sub-bullets of this first bullet.