Just like FDA we need public or private organization that certify all IoT devices for their internet security level.