15 (50) Billion devices connected to the Internet in 2015 (2020). Such devices, like “Smart TVs” are not designed as computers, hence, they do not come with antivirus software. Indeed, there is no antivirus software available. Many such devices lack the ability to be “patched.” So even if vulnerabilities are found, it is not possible to fix them. Security “after the fact” is difficult and expensive. Some incentives would make the IOT less vulnerable. Basic regulatory standards state that devices must be capable of being “patched” and that security breach disclosure laws should be expanded to cover IOT. Liability regime states that as software becomes integrated into (say) medical devices, it will not be possible for software companies to write licensing agreements disclaiming responsibility for everything bad than can happen. Also beneficial is to provide incentives to write secure code. Institutions like CERTs might be helpful. The first CERT was developed at Carnegie Mellon University (CMU).