IoTProvenance.002 ← Previous Identifying where an IoT system or device came from as a basis for initial IoT risk categorization