Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-213A

IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog

Date Published: November 2021


Michael Fagan (NIST), Katerina Megas (NIST), Jeffrey Marron (NIST), Kevin Brady (NIST), Barbara Cuthill (NIST), Rebecca Herold (The Privacy Professor Consultancy), David Lemire (Huntington Ingalls Industries), Brad Hoehn (Huntington Ingalls Industries)



cybersecurity baseline; Internet of Things (IoT); securable computing devices; security requirements; Risk Management Framework; Cybersecurity Framework
Control Families

None selected


Download URL

Supplemental Material:
Blog post

Publication Parts:
SP 800-213

Related NIST Publications:
IR 8259
IR 8259A
IR 8259B

Document History:
11/29/21: SP 800-213A (Final)