The National Institute of Standards and Technology (NIST) Cybersecurity for the Internet of Things (IoT) program has released a discussion essay titled Ideas for the future of IoT cybersecurity at NIST: IoT risk identification complexity. The paper presents some grounding for risk identification in IoT and analyzes the path for forward-looking discussions on how to identify and address risks for IoT devices.