NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.

Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.

U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

PUBLICATIONS

Workshop Summary Report for "Workshop on Foundational Cybersecurity Activities for IoT Device Manufacturers"

Published

Author(s)

Michael Fagan, Katerina Megas, Barbara Cuthill, Brad Hoehn, Evelyn Petrella

Abstract

This report summarizes discussions held at the March 5, 2025 "Workshop on Foundational Cybersecurity Activities for IoT Device Manufacturers" organized by the NIST Cybersecurity for the Internet of Things (IoT) program. This workshop follows an earlier event held in December 2024 titled "Workshop on Updating Manufacturer Guidance for Securable Connected Product Development" to identify major update areas to NIST IR 8259. Similarly, the purpose of this more recent workshop was to discuss planned updates to NIST IR 8259 and gather additional feedback on taking a product viewpoint with greater emphasis on the IoT product lifecycle, expanded discussion of risk analysis, application to industrial contexts, and cybersecurity considerations around data management to support privacy goals. Over time, NIST work has built upon the concepts introduced in the NIST IR 8259, as reflected in subsequent publications that elaborate on IoT cybersecurity for specific sectors and use cases (e.g., federal agency use of IoT, consumer use of IoT in the home or in small businesses).
Citation
NIST Interagency/Internal Report (NISTIR) - 8572
Report Number
8572
NIST Pub Series
NIST Interagency/Internal Report (NISTIR)
Pub Type
NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.IR.8572
Local Download

Keywords

Internet of Things, IoT products, manufacturing, risk assessment, product lifecycle, securable products, security requirements, software development, threat modelling
Internet of Things (IoT) and Cybersecurity and privacy

Citation

Fagan, M. , Megas, K. , Cuthill, B. , Hoehn, B. and Petrella, E. (2025), Workshop Summary Report for "Workshop on Foundational Cybersecurity Activities for IoT Device Manufacturers", NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8572, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=959961 (Accessed October 9, 2025)

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

Created May 13, 2025
Was this page helpful?