Workshop Summary Report for "Building on the NIST Foundations: Next Steps in IoT Cybersecurity"

Published

September 20, 2022

Author(s)

Katerina N. Megas, Michael Fagan, Barbara Bell Cuthill, Brad Hoehn, David Lemire, Rebecca Herold

Abstract

This report summarizes the feedback received on the work of the NIST Cybersecurity for the Internet of Things (IoT) program on IoT product cybersecurity criteria at a virtual workshop in June 2022. The purpose of this workshop was to obtain feedback on specific considerations— and techniques for addressing those considerations—around cybersecurity in IoT products. These considerations have broad applicability across IoT product sectors, including the consumer IoT products sector and the industrial IoT sector. For consumer IoT, these considerations arose in moving the criteria presented in Recommended Criteria for Cybersecurity Labeling for Consumer Internet of Things (IoT) Products into draft NIST IR 8425, Profile of the IoT Core Baseline for Consumer IoT Products, along with a discussion paper on the complexity of risk identification for IoT published before the workshop.

Citation

NIST Interagency/Internal Report (NISTIR) - 8431

Report Number

8431

NIST Pub Series

NIST Interagency/Internal Report (NISTIR)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.IR.8431

Local Download

Keywords

Consumer IoT, Industrial IoT (IIoT), consumer profile, cybersecurity, Internet of Things (IoT), IoT products, privacy, Risk Management Framework, securable products, security requirements.

Citation

Megas, K. , Fagan, M. , Cuthill, B. , Hoehn, B. , Lemire, D. and Herold, R. (2022), Workshop Summary Report for "Building on the NIST Foundations: Next Steps in IoT Cybersecurity", NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8431, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=935383 (Accessed October 1, 2025)