Are you aware of any publicly available documents that would help IoT/Connected product creators develop a systematic/programmatic approach and/or process to securing such new age devices?
A note about the wording of the question. You've asked about IoT but this is more of a concept than a "thing". IoT might cover many subjects from industrial controls to smart cities with home automation in between.
However, the following may be of help.
- The Cloud Security Alliance's "Future Proofing The Connected World" report
- NIST's "Network of Things" report
- The EU's emerging IoT policy
- Robert Silvers, the Assistant Secretary for Cyber Policy at the U.S. Department of Homeland Security has some useful things to say.
- A presentation from an ENISA workshop at least highlights some of the EU thinking that is happening
- The UK Government have a competition running for research
- There is an IoT Security Foundation which has some white papers at least
- You might also check out the Common Criteria "Evaluated Assurance Levels". There is an overview with respect to embedded devices here.
- Some recommendations on Securing Industrial Embedded Devices may be useful.
The approaches should, of course, mirror any other security driven approach. Though we have some added twists for IoT:
- Embedded devices may not have sufficient power to maintain standard security protocols as they can't always cope with the encryption overheads.
- Embedded devices may be difficult to upgrade making it hard or sometimes impossible to fix security issues discovered after deployment.
One area where I'm trying to make a difference is to try and get standard contracts changed to require vendors to ensure that devices can be upgraded after deployment to keep them current and to fix security issues. So we shouldn't assume that issues and fixes always have to be technical.
Just a note about this answer. Because of the question, the answer is inevitably a set of links to other information - normally frowned upon in Stack. It is likely that these links will drift over time which is why I've tried to give the titles where possible so they can be searched for.