From an IoT security perspective, ensure that training is provided on the different tools that are used to routinely scan IoT systems. This can be on-the-job training, but the end result is that security administrators understand how to effectively use the tools that will provide regular inputs into the compliance state of IoT systems.