Cybersecurity standardisation for IoT: A NIST draft

on Saturday, February 17, 2018 at 1:56:04 pm

The Interagency International Cybersecurity Standardization Working Group (IICS WG) has developed a draft report, the NIST Interagency Report (NISTIR) 8200, Status of International Cybersecurity Standardization for Internet of Things (IoT).

The intended audience for this report is both the government and the public, with its purpose being to inform and enable policymakers, managers, and standards participants as they seek timely development of and use of cybersecurity standards in IoT components, systems, and services.

This draft report:

provides a functional description for IoT (Section 4);
describes several IoT applications that are representative examples of IoT (Section 5);
summarizes the cybersecurity core areas and provides examples of relevant standards (Section 6);
describes IoT cybersecurity objectives, risks, and threats (Section 7);
provides an analysis of the standards landscape for IoT cybersecurity (Sections 8 and 9); and
maps IoT relevant cybersecurity standards to cybersecurity core areas (Appendix D).

This draft report is based upon the information available to the participating agencies. Comments are now being solicited to augment that information, especially on the information about the state of cybersecurity standardization for IoT that is found in Sections 8, 9, 10, and Annex D.

The public and also government sector are invited to give their feedback on this draft publication, as it will help to shape the final publication so that it best meets the needs of the public and private sectors.

Comments will be posted as they are received, at https://www.nist.gov/itl/comments-draft-nistir-8200.

About IICS WG

The Interagency International Cybersecurity Standardization Working Group (IICS WG) was established in December 2015 by the National Security Council’s Cyber Interagency Policy Committee (NSC Cyber IPC). Its purpose is to coordinate on major issues in international cybersecurity standardization and thereby enhance U.S. federal agency participation in international cybersecurity standardization. Effective U.S. government participation involves coordinating across the U.S. government and working with the U.S. private sector. There is a much greater reliance in the U.S. on the private sector for standards development than in many other countries. Companies and industry groups, academic institutions, professional societies, consumer groups, and other interested parties are major contributors.

Further, the many Standards Developing Organizations (SDOs) who provide the infrastructure for the standards development are overwhelmingly private sector organizations. On April 25, 2107, the IICS WG established an Internet of Things (IoT) Task Group to determine the current state of international cybersecurity standards development for IoT.

This Report is intended for use by the IICS WG member agencies to assist them in their standards planning and to help to coordinate U.S. government participation in international cybersecurity standardization for IoT. Other organizations may also find this useful in their planning.

The full announcement about this draft report can be found here.

There are no comments

Add yours

You must be logged in to post a comment.

Cybersecurity standardisation for IoT: A NIST draft

There are no comments

Recent News