The biggest security risk will always be the human. I think the most important thing today is to raise awareness. Everybody should be aware that no system is 100% safe. It is important that every employee of a company should question how and why things are done in certain ways.

In the end consumers have to be educated that they don't need all of their devices connected to the internet. Who needs a dishwasher that is connected?

IoT devices have their place, but they should be built with security in mind. Many of these devices are shipped with standard logins, the device should ask the user to change the password in the setup process.