This Recommendation establishes detailed requirements for five security dimensions applicable to Internet of things (IoT) device and gateway: authentication; cryptography; data security; device platform security; and physical security. These security requirements are based on the IoT reference model specified in [ITU-T Y.4100] and on the IoT security framework specified in [ITU-T X.1361].