How do you secure IoT devices

Question

With IoT devices being common attack targets, I want to know the best ways to secure them.

• Should I isolate IoT devices on a separate network from critical systems?
• What are the best practices for managing firmware updates and default credentials?
• Are network segmentation and firewalls enough to prevent unauthorized access?

Would love a checklist or best practices for IoT security.