The assumption of trust which accompanied the early days of the internet is gone and replaced by privacy and security concerns accompanied with attitudes to risk which rise and fall across different sector and application scenarios. IoT covers a diverse range of services and products deployed in both managed and unmanaged use-cases with varying network topologies which bring different security challenges and new potential for attack.