Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks

Boeckl, Kaitlin; Fagan, Michael; Fisher, William; Lefkovitz, Naomi; Megas, Katerina; Nadeau, Ellen; Piccarreta, Ben; Gabel O'Rourke, Danna; Scarfone, Karen

doi:https://doi.org/10.6028/NIST.IR.8228

NISTIR 8228

Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks

Documentation Topics

Date Published: June 2019

Planning Note (3/30/2021): NISTIR 8228 is now available in Portuguese and Spanish translations.

Author(s)

Kaitlin Boeckl (NIST), Michael Fagan (NIST), William Fisher (NIST), Naomi Lefkovitz (NIST), Katerina Megas (NIST), Ellen Nadeau (NIST), Ben Piccarreta (NIST), Danna Gabel O'Rourke (Deloitte & Touche), Karen Scarfone (Scarfone Cybersecurity)

Abstract

The Internet of Things (IoT) is a rapidly evolving and expanding collection of diverse technologies that interact with the physical world. Many organizations are not necessarily aware of the large number of IoT devices they are already using and how IoT devices may affect cybersecurity and privacy risks differently than conventional information technology (IT) devices do. The purpose of this publication is to help federal agencies and other organizations better understand and manage the cybersecurity and privacy risks associated with their individual IoT devices throughout the devices’ lifecycles. This publication is the introductory document providing the foundation for a planned series of publications on more specific aspects of this topic.

Keywords

cybersecurity risk; Internet of Things (IoT); privacy risk; risk management; risk mitigation

Control Families

None selected

Documentation

Publication:
NISTIR 8228 (DOI)
Local Download

Supplemental Material:
NIST news article (other)
Portuguese translation (pdf)
Spanish translation (pdf)

Related NIST Publications:
NISTIR 8259

Document History:
09/24/18: NISTIR 8228 (Draft)
06/25/19: NISTIR 8228 (Final)

Topics

Security and Privacy
general security & privacy; risk management

Applications
Internet of Things

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

NISTIR 8228

Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks

Author(s)

Abstract

Keywords

Control Families

Documentation

Topics