Profile of the IoT Core Baseline for Consumer IoT Products

Published

September 20, 2022

Author(s)

Katerina N. Megas, Michael Fagan, Jeffrey Marron, Paul Watrobski, Barbara Bell Cuthill

Abstract

This publication documents the consumer profile of NIST's Internet of Things (IoT) core baseline and identifies cybersecurity capabilities commonly needed for the consumer IoT sector (i.e., IoT products for home or personal use). It can also be a starting point for businesses to consider in the purchase of IoT products. The consumer profile was developed as part of NIST's response to Executive Order 14028 and was initially published in Recommended Criteria for Cybersecurity Labeling for Consumer Internet of Things (IoT) Products. The consumer profile capabilities are phrased as cybersecurity outcomes that are intended to apply to the entire IoT product. This document also discusses the foundations for developing the recommended consumer profile and related considerations. NIST reviewed a landscape of relevant source documents to inform the consumer profile and engaged with stakeholders across a year-long effort to develop the recommendations

Citation

NIST Interagency/Internal Report (NISTIR) - 8425

Report Number

8425

NIST Pub Series

NIST Interagency/Internal Report (NISTIR)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.IR.8425

Local Download

Keywords

Internet of Things (IoT), consumer IoT, cybersecurity, IoT products, privacy, safety, securable products.

Citation

Megas, K. , Fagan, M. , Marron, J. , Watrobski, P. and Cuthill, B. (2022), Profile of the IoT Core Baseline for Consumer IoT Products, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8425, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=935382 (Accessed October 20, 2025)