NIST publishes a white paper for public consultation on IoT devices’ confidence mechanisms

The U.S. National Institute of Standards and Technology (NIST) issues a white paper on confidence mechanisms for internet of things (IoT) devices. The paper aims to initiate a conversation on the meaning of confidence in the cybersecurity of IoT devices used by individuals and organizations and the various ways of gaining that confidence. The paper describes the current landscape of confidence mechanisms for establishing the security of IoT devices in the marketplace. The paper is based on research on initiatives that can help to instill confidence in IoT device security and a series of meetings with government and industry experts. NIST seeks comments on this paper, including the following questions: (1) While the landscape review wasn’t meant to be exhaustive, are there other significant confidence mechanisms that should be included? (2) Has NIST correctly characterized the different mechanisms for providing confidence in the security of IoT products? And (3) NIST identified seven themes that emerged from the research. Are there other considerations? The deadline for public comments and answers is June 14, 2021.