Absolutely, IoT devices should not be simply permitted onto the network, but should match multiple requirements in order to be authorized onto the network. They need to be the mostly strictly controlled/audited, while at the same time allowing these devices to serve the required function for the business.