Skip to main content

NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.

Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.

U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Foundational Cybersecurity Activities for IoT Product Manufacturers | IR 8259r1 2pd

The second public draft of IR 8259r1, "Foundational Cybersecurity Activities for IoT Product Manufacturers," is available for comment through October 31, 2025.

NIST is releasing the second public draft of NIST Internal Report (IR) 8259 Revision 1, Foundational Cybersecurity Activities for IoT Device Manufacturers. This document describes recommended activities related to cybersecurity for manufacturers, spanning pre-market and post-market, to help them develop products that meet their customers’ needs and expectations for cybersecurity. This draft builds on changes made in the first draft and responds to feedback primarily in

  • Splitting and adding activities to better focus attention on each separate critical activities
  • Expanding emphasis on risk assessment and threat modeling as key parts of the development process
  • Expanding the connection to other references and make connection of this document to other work more explicit

The public comment period for IR 8259r1 is open through October 31, 2025. See the publication details for a copy of the draft and instructions for submitting comments. We look forward to hearing your thoughts and comments on this draft. 

Released September 30, 2025
Was this page helpful?