Create the legal and ethical foundation for a hypothetical business that works in the IoT field so that the company can integrate such concerns into its cybersecurity framework. Pay close attention to those matters which could most closely affect the public, who may not fully understand the enormity of such inter-related concerns. Provide theoretical procedures that could be helpful.