A new report offers the first step toward understanding and managing IoT cybersecurity risks.