Practical Internet of Things Security - Second Edition

Account suspension

Just as with user accounts, do not automatically delete IoT device accounts. Consider sandboxing or partitioning the accounts, maintaining them in a more controlled state in case data tied to the accounts is required for later forensic analysis.