Risk management and compliance in Internet of things