Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Foundational Cybersecurity Activities for IoT Product Manufacturers

Published

Author(s)

Michael Fagan, Katerina Megas, Barbara Cuthill, Jeffrey Marron, Brad Hoehn

Abstract

Internet of Things (IoT) products often lack product cybersecurity capabilities their customers—organizations and individuals—can use to help mitigate their cybersecurity risks. Manufacturers can help their customers by improving the securability of their IoT products by providing necessary cybersecurity functionality and by providing customers with the cybersecurity-related information they need. This publication describes recommended activities related to cybersecurity that manufacturers should consider performing before their IoT products are sold to customers. These foundational cybersecurity activities can help manufacturers lessen the cybersecurity-related efforts needed by customers, which in turn can reduce the prevalence and severity of compromises.
Citation
NIST Interagency/Internal Report (NISTIR) - 8259r1
Report Number
8259r1

Keywords

cybersecurity risk, Internet of Things (IoT), manufacturing, risk management, risk mitigation, securable computing devices, software development

Citation

Fagan, M. , Megas, K. , Cuthill, B. , Marron, J. and Hoehn, B. (2026), Foundational Cybersecurity Activities for IoT Product Manufacturers, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8259r1, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=961575 (Accessed April 21, 2026)

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

Created April 20, 2026
Was this page helpful?