Date Published: December 2020
Comments Due: February 26, 2021 (public comment period is CLOSED)
Email Questions to: iotsecurity@nist.gov
Planning Note (2/8/2021):
The comment period has been extended to February 26, 2021.
, , , , ,
Draft NISTIR 8259C describes a process, usable by any organization, that starts with the core baselines provided in NISTIRs 8259A and 8259B and explains how to integrate those baselines with organization- or application-specific requirements (e.g., industry standards, regulatory guidance) to develop a IoT cybersecurity profile suitable for specific IoT device customers or applications. The process in NISTIR 8259C guides organizations needing to define a more detailed set of capabilities responding to the concerns of a specific sector, based on some authoritative source such as a standard or other guidance, and could be used by organizations seeking to procure IoT technology or by manufacturers looking to match their products to customer requirements.
This draft is released concurrently with these related IoT draft publications:
NOTE: A call for patent claims is included on page iv of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy--Inclusion of Patents in ITL Publications.
None selected
Publication:
NISTIR 8259C (Draft) (DOI)
Local Download
Supplemental Material:
None available
Other Parts of this Publication:
NISTIR 8259
NISTIR 8259A
NISTIR 8259B
NISTIR 8259D (Draft)
Related NIST Publications:
Document History:
12/15/20: NISTIR 8259C (Draft)
Security and Privacy
risk management
Technologies
hardware
Applications
cybersecurity framework; Internet of Things