how to perform an iot security audit