Developers design, build and integrate IoT services and may specialise as solution or platform architects, as application designers or implementers, or as device designers or implementers; in every role they are expected to apply security and privacy by design and a secure software development life cycle. The IoT device developer is the sub-role that engineers and produces the device hardware; since one device can be run by a user or by a provider and reused across many use cases, the device developer should weigh, while still designing, the security and privacy needs of the scenarios the device may be put to, so the device ships with the features its customers need. Developers must understand what providers and users expect and require so that the right controls are chosen to treat the system's risks; the clause 7 controls addressed to the IoT service developer are theirs.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.