Review the IIC "Endpoint Security Best Practices" document to see if we can glean any additional security requirements. For example, the paper mentions the EST, SLB, SLC, SLE standards for certificate management for IoT devices. Do we need metadata for those? The paper also defines a set of actors and vocabulary that we should review, cite, and/or adopt where appropriate.
Review the IIC "Endpoint Security Best Practices" document to see if we can glean any additional security requirements. For example, the paper mentions the EST, SLB, SLC, SLE standards for certificate management for IoT devices. Do we need metadata for those? The paper also defines a set of actors and vocabulary that we should review, cite, and/or adopt where appropriate.