The second public draft of IR 8259r1, "Foundational Cybersecurity Activities for IoT Product Manufacturers," is available for comment through October 31, 2025.
NIST is releasing the second public draft of NIST Internal Report (IR) 8259 Revision 1, Foundational Cybersecurity Activities for IoT Device Manufacturers. This document describes recommended activities related to cybersecurity for manufacturers, spanning pre-market and post-market, to help them develop products that meet their customers’ needs and expectations for cybersecurity. This draft builds on changes made in the first draft and responds to feedback primarily in
The public comment period for IR 8259r1 is open through October 31, 2025. See the publication details for a copy of the draft and instructions for submitting comments. We look forward to hearing your thoughts and comments on this draft.