IoT creates new risk exposures for enterprises. With the increasing sophistication of attacks and as devices multiply, IoT risk is unavoidable. To avoid risk is to avoid progress! Following threat modeling of a typical IoT solution architecture, this talk will offer techniques based on emerging standards, open source IoT projects and industry best practices to mitigate IoT threats and manage risk.