First and foremost one needs to learn what is meant by “requirements” in a security and engineering context, why requirements are useful for managing risk and what IOT requirements may look like. Risks will manifest themselves in relation to “requirements” or project goals: what do you need to get from the project for it to be considered a success, and what does security play a part in the overall success. This articles provides an overview of requirements and risk management in the context of IOT.