A person SHOULD be put in charge of the operation of every IoT device. The persons in charge SHOULD be appropriately informed about handling their IoT devices.
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)