Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks: NISTIR 8228

NIST has published NIST Interagency/Internal Report 8228, "Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks."

The Internet of Things (IoT) is a rapidly evolving and expanding collection of diverse technologies that interact with the physical world, yet many organizations are not necessarily aware of the large number of IoT devices they already use. Understanding both existing and future usage of IoT devices can enable organizations to identify IoT’s effects on managing cybersecurity and privacy risks as well as how such risks differ from those of conventional information technology (IT) devices.

NIST announces the publication of NISTIR 8228, Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks, which provides guidance for federal agencies and other organizations to better understand and manage the risks associated with individual IoT devices throughout the lifecycles of those devices. It also considers three high-level goals for risk mitigation: device security, data security, and individual privacy. This introductory report provides the foundation for a planned series of publications on more specific aspects of this topic.

Released June 25, 2019, Updated July 9, 2019