Thanks for sharing Gordon, and good question Shane.. I found the article a bit lacking in terms of a clear reason why regulation is *the* main way forward. It is not said that if you leave the regulation of IoT in the hands of several different goverments across the world that you get better security standards all-round. More likely, you will get certain jurisdictions that do a good job and others that don't.
I also feel that the call for governments to take this up really opens the door to legitimizing the ongoing efforts at the ITU to make it the hub for IoT standard development. And looking at the recent discussions on Over the Top (OTT) services and DOA at the ITU-D WTSA meeting, I am not sure that is good solution.
Rather, it would be great if we could find a way to look at soft law options and encourage the technical actors responsible for developing security considerations to take the importance of strong security for IoT on board, if only because if they don't people will lose trust in them and their stuff they build.
And there I see a clear role for RIPE and its members.
Happy to further discuss! Best,