Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Read more about NIST's guidance for manufacturers and supporting parties creating IoT devices and products.
Read more about NIST guidance for Federal Agencies looking to deploy IoT devices in their systems.
Read more about the program's contributions to NIST's response to E.O. 14028 on improving Consumer IoT cybersecurity.
The Challenge
Fostering cybersecurity for devices and data in the IoT ecosystem, across industry sectors and at scale
Recent Announcements
- The Application of Cybersecurity for IoT Capabilities to Real-World Scenarios – A Cybersecurity Insights Blog (April 24, 2022, Jeff Marron)
- Request for Information | Evaluating and Improving Cybersecurity Resources: The Cybersecurity Framework and Cybersecurity Supply Chain Risk Management (Feb. 22, 2022)
- Our Quest: Advancing Product Labels to Help Consumers Consider Cybersecurity – A Cybersecurity Insights Blog (February 16, 2022, Katerina Megas and Michael Ogata)
- NIST Issues Guidance on Software, IoT Security and Labeling (February 4, 2022)
- Overview of SP 800-213 / 213A: IoT Device Cybersecurity Guidance for the Federal Government – Webinar (February 4, 2022)
- Internet of Things Advisory Board (January 2022)
- Hot Topics in Consumer Cybersecurity Labeling – Our December 2021 Workshop – A Cybersecurity Insights Blog (January 12, 2022, Katerina Megas)
- Podcast Interview: IoT Cybersecurity program technical lead Michael Fagan was interviewed for the ATARC Federal IT Newscast: “The Year of the Hybrid with Jim Richburg and Special Guest, Mike Fagan of NIST” (December 30, 2021)
- Consumer Cybersecurity Labeling for IoT Products: Discussion Draft on the Path Forward (December 2, 2021) [view details] [download]
- Convergent Evolution: SP 800-213, the Federal Profile, and the IoT Cybersecurity Catalog – A Cybersecurity Insights Blog (December 2, 2021)
- SP 800-213A – IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog (FINAL) (November 29, 2021) [Download]
- SP 800-213 – IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements (FINAL) (November 29, 2021) [Download]
Earlier announcements can be found on the program’s Announcement History page.
About the Program
NIST’s Cybersecurity for the Internet of Things (IoT) program supports the development and application of standards, guidelines, and related tools to improve the cybersecurity of connected devices, products and the environments in which they are deployed. By collaborating with stakeholders across government, industry, international bodies, academia, and consumers, the program aims to cultivate trust and foster an environment that enables innovation on a global scale.
The IoT Cybersecurity Program charter was established at the end of 2016 with three overarching program goals.
Supports the development and application of standards, guidelines, and related tools to improve the cybersecurity of connected devices and the environments in which they are deployed.
Collaborate with stakeholders across government, industry, international bodies, and academia.
Cultivate trust and foster an environment that enable innovation on a global scale.
Mailing List
The Cybersecurity for IoT program uses the GovDelivery to email announcements, join our mailing list to be among the first to receive NIST IoT cybersecurity news and information. Sign up or log in for email updates and select “IoT Cybersecurity” under Information Technology Laboratory (ITL) > Cybersecurity Programs.