IoT Value and Product Strategy · Study deck

Why IoT Projects Fail: Security and Redesign

A connected product has cleared its budget review and can survive a lost cloud link.

Ada is your guide for this deck.

Ada, the module guide, in a scene from this chapter.

After studying this chapter

Learning objectives

You will be able to:

Explain: When transforming ordinary objects into IoT devices, the most common pitfall is focusing exclusively on "what cool things can this do?" rather than systematically evaluating the six dimensions of IoT product design.
Explain: Unique device identity and narrow roles stop one stolen credential from becoming fleet-wide access, which is why shared passwords are called out by name.
Explain: If a row is unchecked, turn it into a named risk with a mitigation, cost, and owner before treating the project as production-ready.
Explain: Segmentation limits how far they can reach across the network.

Major section

Defense-in-Depth Security

Segmentation limits how far they can reach across the network.

Encryption means what they capture in transit or at rest is not readable.
Unique device identity and narrow roles stop one stolen credential from becoming fleet-wide access, which is why shared passwords are called out by name.
Its claim is that each layer contains a failure in the one above.

Five-layer defense-in-depth model for IoT deployments.

Major section

Redesigning Everyday Objects for IoT

When transforming ordinary objects into IoT devices, the most common pitfall is focusing exclusively on "what cool things can this do?" rather than systematically evaluating the six dimensions of IoT product design.

An LED ring provides a glanceable reminder, and BLE uses the phone as the cloud relay to protect the coin-cell power budget.
The six dimensions belong together: adding connectivity without reworking sensing, feedback, power, and security would burden the bottle without improving hydration tracking.
This analysis illustrates why connectivity selection is one of the highest-leverage decisions in IoT product design.

Six dimensions to check when redesigning an everyday object as an IoT product.

Major section

Interactive Security Checklist Scorer

The checklist is the handoff point from reading to action.

Each "No" answer represents a risk that should be addressed before proceeding.
Lock-in: Devices support Matter, Thread, or open APIs; the system works without vendor cloud; data is exportable in standard formats.
If a row is unchecked, turn it into a named risk with a mitigation, cost, and owner before treating the project as production-ready.

Try it: Interactive Security Checklist Scorer in the chapter

Major section

IoT Risks: Lock-In, Security, Cost, and Connectivity

The top path crosses out a shared factory key; the bottom path shows the key changed before the device reaches the connected system.

Temperature Terry says: "Imagine you buy a toy robot that only works with one brand of batteries.
Your robot is useless!
Buying a smart device is like getting a pet.

Major section

IoT Risks: Lock-In, Security, Cost, and Connectivity (continued)

That's called vendor lock-in -- it's like being stuck with one brand forever.".

Light Lucy explains: "The crossed-out factory key in the top path shows what not to use.
In the lower path, the old key is rejected and a new one is accepted.
The pet food (electricity, internet, cloud service) costs WAY more over time than the pet itself!

Deck summary

Key takeaways

Segmentation limits how far they can reach across the network.

When transforming ordinary objects into IoT devices, the most common pitfall is focusing exclusively on "what cool things can this do?" rather than systematically evaluating the six dimensions of IoT product design.
The checklist is the handoff point from reading to action.
The top path crosses out a shared factory key; the bottom path shows the key changed before the device reaches the connected system.
That's called vendor lock-in -- it's like being stuck with one brand forever.".

Retrieval practice

Recall check 1 of 6

Ada says: answer from memory, then check your reasoning.

Q1A water bottle gains a radio and app but does not measure drinking, give useful feedback, or protect health data. What should the team do?

AShip the app and defer hydration sensing and health-data safeguards.

BAdd more radio range and keep the other design the same

CRemove the local drinking reminder and rely only on cloud alerts

DThe team needs hydration sensing, feedback, power and security.

Show answer

Answer: D Correct: the connected feature should improve the original job while its new costs and risks are handled.

Retrieval practice

Recall check 2 of 6

Ada says: answer from memory, then check your reasoning.

Q2You are designing a smart plant pot that monitors soil moisture and reminds users to water their plants. Which connectivity choice is MOST appropriate?

ABluetooth Low Energy (BLE)

B4G LTE cellular

CLoRaWAN

DWi-Fi (802.11n)

Show answer

Answer: A The pot sends infrequent moisture data over a short distance.

Retrieval practice

Recall check 3 of 6

Ada says: answer from memory, then check your reasoning.

Q3A team is adding IoT capability to a commercial dishwasher for restaurants. They plan to use a smartphone app as the only user interface. What is the PRIMARY concern with this approach?

AThe main barrier is the engineering cost of building a mobile application

BA commercial dishwasher can operate without visible local status or controls

CThe main barrier is the retail price of staff members’ personal phones

DStaff may lack usable phones in a wet, shared kitchen

Show answer

Answer: D A small physical display or controls can serve staff at the machine; an app can still offer managers deeper analytics.

Retrieval practice

Recall check 4 of 6

Ada says: answer from memory, then check your reasoning.

Q4Complete the industrial sensor monitoring pipeline:

Aif value > self.threshold_high or value < self.threshold_low:

Bif value > self.threshold_high and value < self.threshold_low:

Cif value != self.threshold_high:

Dif value > self.threshold_low:

Show answer

Answer: A Industrial monitoring uses threshold-based alerts.

Retrieval practice

Recall check 5 of 6

Ada says: answer from memory, then check your reasoning.

Q5An enterprise deploys 500 IoT sensors with a projected 3-year cost of $150,000 (hardware only). After year one, the actual cost has already reached $180,000 including connectivity fees, cloud storage, and field maintenance. What pitfall does this illustrate?

AThe sensors were overpriced by the vendor, inflating hardware costs beyond budget

BThe deployment scale was too large for a first IoT project

CThe TCO misses connectivity, cloud and field maintenance costs.

DThe team chose the wrong sensor technology for their application

Show answer

Answer: C The original three-year estimate covered only hardware.

Retrieval practice

Recall check 6 of 6

Ada says: answer from memory, then check your reasoning.

Q6A smart home user buys devices from three different manufacturers: smart lights (Brand A, Zigbee), a thermostat (Brand B, WiFi + proprietary cloud), and door locks (Brand C, Z-Wave). After Brand B discontinues their cloud service, the thermostat becomes a $200 paperweight. Which IoT pitfall is this, and how could it have been prevented?

AProprietary cloud lock-in without local fallback caused the failure.

BNetwork security neglect -- the devices should have been on a separate VLAN

CFailure mode neglect -- the thermostat should have had a watchdog timer

DPrototype-to-production gap -- the thermostat was not tested for long-term reliability

Show answer

Answer: A Vendor lock-in is the most common consumer IoT pitfall.

Print reference

Answers

Answer key.

D · Correct: the connected feature should improve the original job while its new costs and risks are handled.
A · The pot sends infrequent moisture data over a short distance.
D · A small physical display or controls can serve staff at the machine; an app can still offer managers deeper analytics.
A · Industrial monitoring uses threshold-based alerts.
C · The original three-year estimate covered only hardware.
A · Vendor lock-in is the most common consumer IoT pitfall.