NIST publishes discussion draft on Cybersecurity for the Internet of Things (IoT) Program
The US National Institute of Standards and Technology’s (NIST) discussion draft is about core cybersecurity capabilities baselines for IoT devices, asking for public input on the matter. The draft details a set of cybersecurity capabilities that could be achieved by most IoT devices, especially looking for feedback concerning: the definitions and specificity of adequate capabilities, the usefulness of establishing high-level principles for IoT devices, the adequacy of the criteria chosen for identifying baseline capabilities, and the necessity of creating a taxonomy to describe types of IoT devices for future analysis. The draft is based on two previous reports: the ‘NIST internal report 8228; Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks’ and the ‘Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats’.