Some cybersecurity best practices and guidance for Internet of Things (IoT) device manufacturers are now available from NIST’s Cybersecurity for IoT Program:

• NISTIR 8259A, IoT Device Cybersecurity Capability Core Baseline, identifies a core baseline of IoT device cybersecurity capabilities for manufacturers — i.e. device capabilities generally needed to support common cybersecurity controls.
• NISTIR 8259, Foundational Cybersecurity Activities for IoT Device Manufacturers, provides specific recommended activities to help manufacturers address customer needs for IoT cybersecurity in their product development processes.

For more context about these publications, please read More than just a milestone in the Botnet Roadmap towards more securable IoT devices from NIST’s Cybersecurity Insights blog.