The Internet of Things creates a vast, distributed attack surface. Increased mobility, heterogeneity, and interoperability give attackers more vectors to exploit. Organizations need to think holistically about IoT device security.