CRISC: Certified in Risk and Information Systems Control

IoT devices that do not receive firmware updates remain vulnerable to known security flaws. Attackers can exploit these unpatched weaknesses to compromise devices, gain unauthorized access, or incorporate devices into botnets.