The nature of Internet of Things (IoT) devices and the scale of their use is what makes securing them so hard. IoT devices emerged for industrial controls two decades ago and then expanded rapidly into business and consumer technologies. In recent years, both industry and customer thinking about these devices has not kept pace with their technology advances and increasing vulnerabilities. That thinking must change significantly for these devices to be used safely without a high potential for catastrophic consequences to owners of the IoT devices. This whitepaper examines some of the key cyber vulnerabilities for IoT devices commonly used within the physical security industry and the steps organizations should take mitigate these threats.