IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog

Published

November 29, 2021

Author(s)

Katerina N. Megas, Michael Fagan, Jeffrey Marron, Kevin Gerard Brady, Barbara Bell Cuthill, Rebecca Herold, David Lemire, Noel Hoehn

Abstract

This publication provides a catalog of internet of things (IoT) device cybersecurity capabilities (i.e., features and functions needed from a device to support security controls) and non-technical supporting capabilities (i.e., actions and support needed from device manufacturers and other supporting entities to support security controls) that can help organizations as they use Special Publication (SP) 800-213 to determine and establish device cybersecurity requirements. This catalog cross references the capabilities in the catalog to the cybersecurity controls in NIST SP 800-53. Organizations should refer to SP 800-213 as that publication provides necessary context to effectively use this catalog and related material.

Citation

Special Publication (NIST SP) - 800-213A

Report Number

800-213A

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.SP.800-213A

Local Download

Keywords

Cybersecurity baseline, Internet of Things (IoT), securable computing devices, security requirements, Risk Management Framework, Cybersecurity Framework

Citation

Megas, K. , Fagan, M. , Marron, J. , Brady, K. , Cuthill, B. , Herold, R. , Lemire, D. and Hoehn, N. (2021), IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-213A, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=933705 (Accessed October 9, 2025)