SAN JOSE, Calif. — The Industrial Internet Consortium (IIC) rolled out its next step in an effort to deliver guidelines for securing the IoT in business settings. A new white paper lays out a process for companies to define and deliver levels of security appropriate for their situations.

The so-called security maturity model follows a security framework that the IIC rolled out in late 2016. The trade group, formed in 2014, will now turn its focus to delivering a document on best practices and a set of industry profiles.

A handful of companies now provide IoT security audits, but “we realized there were gaps to determine what’s the right level of security for your solution — there were guidelines missing,” said Ron Zahavi, who co-authored the white paper and chairs an IIC security committee.