Expert Insights: The Rise of IoT and Smart Devices

The EU Cyber Resilience Act, adopted in 2024, bans default passwords on connected devices sold in Europe and forces manufacturers to support security updates for a defined period. It is the clearest sign yet that the Internet of Things has outgrown its "ship now, patch later" era—and a reminder of how much patching is still needed.

The Engineers: It Works, Security Doesn't

Network builders who operate IoT infrastructure are blunt about where things stand. "The technology works," as one senior architect at a major carrier put it. "The question was never whether we could connect billions of devices. It was whether we could do it securely, reliably, and economically."

Reliability varies by environment. Factory floors and warehouses deliver impressive uptime because conditions are controlled. Outdoor agricultural deployments across thousands of acres, maritime sensors, and vehicle trackers face propagation problems that indoor kits never see. On security, the same engineers are openly pessimistic. Most IoT devices have thin margins, and vendors have historically treated security as a cost to minimize rather than a feature to sell. The result is millions of devices shipping with default credentials, firmware that cannot be updated, and unencrypted traffic.

The EU Cyber Resilience Act, the UK's PSTI Act, and a patchwork of U.S. state laws are beginning to raise the floor: no default passwords, disclosed support periods, and mandatory vulnerability reporting. Insiders expect the rules to lift baseline security over the next three to five years, but they will not eliminate the problem.

Data Scientists Hate the Data

The people who analyze IoT data say the dirtiest secret is the data itself. Sensors drift. Batteries sag and bias readings. Temperature and humidity shift accuracy. Communication errors corrupt values in transit. Before any machine learning can run, teams spend most of their time cleaning and validating.

"The biggest mistake organizations make is treating IoT data as automatically trustworthy," said a principal data scientist at a large industrial firm. "Sensor data is a means to an estimate, not ground truth." The practical response is sensor fusion—combining vibration, temperature, and acoustic readings on a machine, or lidar, radar, and cameras on a vehicle, so the weaknesses of one sensor are covered by the others. Autonomous vehicles are the most aggressive example, but the same principle applies to wind turbines, factory robots, and hospital equipment.

Strategy Starts With the Problem

Business analysts who study IoT adoption keep returning to one finding. The successful deployments start with a business problem, not with the technology. A company that wants to cut unplanned downtime by 20 percent works backward from that goal to the sensors and models it needs. The failures start by buying a thousand sensors, hooking them up, and then hunting for a question the data might answer.

The IoT graveyard is full of proof-of-concept projects that showed flashy dashboards but never changed an operational decision. A smart building that cuts energy use 8 percent is a success. A deployment that collects terabytes of environmental data and does nothing with it is a failure regardless of how fancy the analytics stack is.

Society-level researchers push the point further. Pervasive sensing creates information asymmetry: whoever controls the sensor data knows things about the people inside the network. Smart buildings know when staff arrive and leave. Connected cars track every trip. Most jurisdictions still lack rules governing non-personal machine data, and governance frameworks lag the technology.

The expert consensus a decade into IoT is unglamorous. The technology works in controlled settings; it is fragile in hard ones; security is still underbuilt; data quality is underestimated; and value comes from picking a specific business problem rather than connecting everything for its own sake. The companies and regulators that absorb those lessons—rather than reaching for the next buzzword—are the ones that will make the connected world trustworthy enough to be worth having.