Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Resources
On-Line Informative References (OLIR)
The National Online Informative References (OLIR) Program is a NIST effort to facilitate subject matter experts (SMEs) in defining standardized online informative references (OLIRs) between elements of their documents, products, and services and elements of NIST documents. NISTIRs 8259A and (soon) 8259B are available as focal documents in OLIR to facilitate the development mapping between the requirements in those documents and guidance documents from other sources. As of October 2021 five informative references have been mapped to NISTIR 8259A. Information on submitting informative reference mappings can be found here.
Related Laws, E.O.s, etc.
The following Laws, Executive Orders and official documents are related to NIST Cybersecurity for IoT program efforts:
- Cybersecurity Improvement Act of 2020 (Public Law 116-207)
- William M. (Mac) Thornberry National Defense Authorization Act for Fiscal Year 2021 (Public Law 116-283, Section 9204: Internet of Things)
- Executive Order on Improving the Nation’s Cybersecurity (E. O. 14028)
- Executive Order on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure (E.O. 13800)
Related NIST Resources
In addition to the products listed on the Cybersecurity for IoT program publications page, other NIST products are relevant to the security of IoT devices and their use in federal systems, including:
- Cyber Supply Chain Risk Management Practices for Systems and Organization, NIST SP 800-161 Rev. 1
- Secure Software Development Framework (SSDF)
- NIST: Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1
- NIST: SP 800-53 Rev. 5, Security and Privacy Controls for Information Systems and Organizations
- Defending Against Software Supply Chain Attacks (joint CISA-NIST publication issued by CISA)
- Key Practices in Cyber Supply Chain Risk Management: Observations from Industry, NISTIR 8276
Related Non-NIST Resources*
- UK DCMS Code of Practice for Consumer IoT Cybersecurity
- ETSI Consumer IoT Security (ETSI EN 303 645, TS 103 701, TR 103 621)
- ANSI/CTA-2088 Baseline Cybersecurity Standard for Devices and Device Systems
- OWASP IoT Project
*Non-NIST resources are provided for information. Their inclusion here does not mean that NIST endorses these resources.