The National Institute of Standards and Technology’s Cybersecurity for the Internet of Things program has published two internal reports, or IR, outlining recommended cyber activities for IoT device manufacturers.
Both IR 8572 and IR 8259r1 advance the IoT Cybersecurity Improvement Act of 2020’s requirement to review the federal cyber guidelines every five years, NIST said Tuesday.
Enabling IoT Manufacturers to Meet Customers’ Cyber Expectations
IR 8572 summarizes an NIST workshop on March 5 that discussed upcoming updates to IR 8259, which centers on IoT cybersecurity guidelines for specific industries and use cases. The event also collected feedback from participants on their views about the IoT product lifecycle, expanded discussion of risk analysis, application to industrial contexts and cybersecurity concerns on data management to support privacy goals.
Meanwhile, IR 8259r1 provides best practices for IoT manufacturers to help them develop products that meet customer needs and expectations for cybersecurity. The updated document highlights the NIST mission to address the full IoT product scope and expand maintenance, support and end-of-life considerations for IoT products.
Interested parties are invited to review IR 8259r1 and submit their comments no later than July 14.
