Workshop Summary Report for “Building the Federal Profile For IoT Device Cybersecurity” Virtual Workshop

This report summarizes the feedback received on the work of the NIST Cybersecurity for IoT program on device cybersecurity at a virtual workshop in July 2020. NISTIR 8259, Foundational Cybersecurity Activities for IoT Device Manufacturers and NISTIR 8259A, IoT Device Cybersecurity Capability Core Baseline provide general guidance on how manufacturers can understand and approach their role in supporting customers’ cybersecurity needs and goals. As discussed in those documents, specific sectors and use cases may require more specific guidance than what is included in NISTIR 8259A’s core baseline for IoT devices. NIST conducted the virtual workshop “Building the Federal Profile for IoT Device Cybersecurity” to discuss and gather community input on the creation of a federal profile of the core baseline for use by federal agencies. This publication provides a summary of the workshop. The baseline will be published in NISTIR 8259D, Profile of the IoT Core Baseline for the Federal Government.