IoT, cloud and embedded systems software security starts with component selection, assessing known security breaches and performing a penetration test on the actual implementation.