IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog

Fagan, Michael; Megas, Katerina; Marron, Jeffrey; Brady, Kevin; Cuthill, Barbara; Herold, Rebecca; Lemire, David; Hoehn, Brad

doi:https://doi.org/10.6028/NIST.SP.800-213A

SP 800-213A

IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog

Documentation Topics

Date Published: November 2021

Author(s)

Michael Fagan (NIST), Katerina Megas (NIST), Jeffrey Marron (NIST), Kevin Brady (NIST), Barbara Cuthill (NIST), Rebecca Herold (The Privacy Professor Consultancy), David Lemire (Huntington Ingalls Industries), Brad Hoehn (Huntington Ingalls Industries)

Abstract

This publication provides a catalog of internet of things (IoT) device cybersecurity capabilities (i.e., features and functions needed from a device to support security controls) and non-technical supporting capabilities (i.e., actions and support needed from device manufacturers and other supporting entities to support security controls) that can help organizations as they use Special Publication (SP) 800-213 to determine and establish device cybersecurity requirements. This catalog cross references the capabilities in the catalog to the cybersecurity controls in NIST SP 800-53. Organizations should refer to SP 800-213 as that publication provides necessary context to effectively use this catalog and related material.

Keywords

cybersecurity baseline; Internet of Things (IoT); securable computing devices; security requirements; Risk Management Framework; Cybersecurity Framework

Control Families

None selected

Documentation

Publication:
SP 800-213A (DOI)
Local Download

Supplemental Material:
Blog post (web)

Other Parts of this Publication:
SP 800-213

Related NIST Publications:
NISTIR 8259
NISTIR 8259A
NISTIR 8259B

Document History:
11/29/21: SP 800-213A (Final)

Topics

Security and Privacy
acquisition; program management; risk management

Technologies
hardware

Applications
cybersecurity framework; Internet of Things

Laws and Regulations
Internet of Things Cybersecurity Improvement Act