The IoT is an information and communication technology, which provides greater speed and flexibility in activities performed and decision-making. It is a reality that, through network connectivity and computing capacity, allows interconnected devices to generate, exchange and process data with minimal human intervention, thus offering a wide range of functionalities to the computing universe. However, this universe of options provided by IoT technology brings with it a universe of concerns regarding information security. A key issue with IoT environments is ensuring security across all services and devices. The diversity of threats, together with the lack of concern of most of its administrators and device designers, make the IoT network environment vulnerable. Therefore, this article aims to present a new strategy for improving security in IoT systems. The strategy is to manage risks dynamically, enabling their monitoring and control in real time. In this way, risks will be analyzed and evaluated dynamically, enabling security mechanisms to be applied before major damage is caused to IoT systems.