iot device vulnerability assessment checklist