A method for managing edge devices includes: monitoring network traffic between an edge device (ED), an edge node (EN), and a cloud device (CD) to obtain a first dataset; monitoring an activity performed on the ED to obtain a second dataset; analyzing the first dataset to generate a network traffic analysis output (NTAO); analyzing the second dataset to generate an activities analysis output (AAO); performing a first tagging of the ED under as either a secured devices category or an unsecured devices category based on the NTAO, AAO, and a first identifier; performing a second tagging of the ED under a corresponding unsecured devices sub-category; upon tagging the ED and based on the AAO, making a determination that the activity is a malicious activity; and implementing a security policy to disrupt a user of the ED.