Does the data need to be audited? So far in the IoT Security principles blog series we have looked at the architecture of devices, data privacy and trust, making sure that data gets to where it needs to be and on time, controlling access to devices, software updates and the transfer of ownership of devices.