This research proposal aims to evaluate and identify the privacy and security issues of IoT devices used in commercial organizations and society. It discusses the security challenges, compatibility issues, and the role of risk management in addressing these issues. The proposal also includes a research plan and publication strategy.