Guidelines for designing IoT devices with a security-first approach, emphasizing authentication, secure updates, protected communication, and risk-aware architecture.