How to conduct an IoT audit for compliance