This paper was completed in October 2016 by the Cloud Security Alliance (CSA) and provides a guide that companies should follow to design secure Internet of Things (IoT) products. Consideration is given to development methodology and environment, desired security features, privacy protection, hardware design, protection of data, security of application and services, protection of logical interfaces, secure updates, authentication, key management, logging, and security reviews.