Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Read more about NIST's guidance for manufacturers and supporting parties creating IoT devices and products.
Read more about NIST guidance for Federal Agencies looking to deploy IoT devices in their systems.
Read more about the program's contributions to NIST's response to E.O. 14028 on improving Consumer IoT cybersecurity.
The Challenge
Fostering cybersecurity for devices and data in the IoT ecosystem, across industry sectors and at scale
Recent Announcements
-
Initial Meeting of the IoT Advisory Board to be held January 18-19, 2023
- U.S. Department of Commerce Appoints Members for New Internet of Things Advisory Board (October 24, 2022)
- Now available: NIST's final recommendations for Cybersecurity features in Consumer IoT Products, NIST IR 8425: Profile of the IoT Core Baseline for Consumer Products! This IR is the culmination of over a year of stakeholder involvement that included 3 workshops, multiple rounds of comments, and many conversations with stakeholders.
- Newly published: The summary report for NIST's June 2022 Next Steps in IoT Cybersecurity workshop, NIST IR 8431! This report presents what we learned from stakeholders.
- Standards: The CPSO’s Best Friend – A Cybersecurity Insights blog (July 15, 2022, Katerina Megas)
- Discussion Essay: Ideas for the Future of IoT Cybersecurity at NIST: IoT Risk Identification Complexity (DRAFT) (June 21, 2022) [DOWNLOAD]
- NIST IR 8425: Profile of the IoT Core Baseline for Consumer IoT Products (DRAFT) (June 17, 2022) [DOWNLOAD]
- Registration is now open for our June 22, 2022 virtual workshop: “Building on the NIST Foundations: Next Steps in IoT Cybersecurity”. We will have industry experts discussing consumer IoT cybersecurity requirements, the challenges of risk assessment for emergent use cases, and the role of standards for manufacturers and users of IoT devices and products. Click Here for more information and to register for the event.
- NIST conducted a review of the pilot programs for cybersecurity labeling of consumer IoT products and consumer software products, consulting with the private sector and relevant agencies to assess the effectiveness of the programs, determining what improvements can be made going forward, and submitted a summary report on May 10, 2022, to the Assistant to the President for National Security Affairs (APNSA).
- Cybersecurity for IoT: The Road We’ve Traveled, The Road Ahead – A Cybersecurity Insights Blog (May 16, 2022, Michael Fagan)
- The Application of Cybersecurity for IoT Capabilities to Real-World Scenarios – A Cybersecurity Insights Blog (April 24, 2022, Jeff Marron)
- Request for Information | Evaluating and Improving Cybersecurity Resources: The Cybersecurity Framework and Cybersecurity Supply Chain Risk Management (Feb. 22, 2022)
- Our Quest: Advancing Product Labels to Help Consumers Consider Cybersecurity – A Cybersecurity Insights Blog (February 16, 2022, Katerina Megas and Michael Ogata)
- NIST Issues Guidance on Software, IoT Security and Labeling (February 4, 2022)
- Overview of SP 800-213 / 213A: IoT Device Cybersecurity Guidance for the Federal Government – Webinar (February 4, 2022)
- Internet of Things Advisory Board (January 2022)
- Hot Topics in Consumer Cybersecurity Labeling – Our December 2021 Workshop – A Cybersecurity Insights Blog (January 12, 2022, Katerina Megas)
Earlier announcements can be found on the program’s Announcement History page.
About the Program
NIST’s Cybersecurity for the Internet of Things (IoT) program supports the development and application of standards, guidelines, and related tools to improve the cybersecurity of connected devices, products and the environments in which they are deployed. By collaborating with stakeholders across government, industry, international bodies, academia, and consumers, the program aims to cultivate trust and foster an environment that enables innovation on a global scale.
The IoT Cybersecurity Program charter was established at the end of 2016 with three overarching program goals.
Supports the development and application of standards, guidelines, and related tools to improve the cybersecurity of connected devices and the environments in which they are deployed.
Collaborate with stakeholders across government, industry, international bodies, and academia.
Cultivate trust and foster an environment that enable innovation on a global scale.
Mailing List
The Cybersecurity for IoT program uses the GovDelivery to email announcements, join our mailing list to be among the first to receive NIST IoT cybersecurity news and information. Sign up or log in for email updates and select “IoT Cybersecurity” under Information Technology Laboratory (ITL) > Cybersecurity Programs.