IOT ARCHITECT'S GUIDE TO ATTAINABLE SECURITY AND PRIVACY