The cybersecurity manager of a rapidly growing technology startup has just acquired a set of new Internet of Things $($IoT$)$ devices to enhance its smart office environment. However, the manager has concerns about the security of these devices due to recent reports of IoT vulnerabilities. To address this, what method would the organization use to establish consistent and centralized rules and procedures regarding configuring and securing the environment?