NIST understands the importance of the Internet of Things (IoT) and how it impacts our everyday lives in a big way. The IoT could revolutionize the American economy by enabling a fully connected world with on-demand access to data, systems, and each other. Since an IoT product might be defined as including an IoT device and any other product components that are necessary to using the IoT device beyond basic operational features, there are risks that come along with this level of connectivity—especially among so many devices across the globe. We must be able to trust the privacy, security, authenticity, and reliability of these devices, as well as the advanced networks that support them.
NIST’s collaborative work across IoT focuses on the role we can play to help guarantee our connected future. From developing a fundamental understanding of IoT systems, to supporting trustworthy smart and connected systems and networks, to helping to create IoT standards, to supporting our power grid and cybersecurity work—NIST is constantly exploring new approaches to solve next-generation challenges. We hope to help enable a world where diverse wireless devices and systems coexist without compromise and encourage innovation.
The President’s Executive Order (EO) on “Improving the Nation’s Cybersecurity (14028)” issued on May 12, 2021, charges multiple agencies – including NIST– with enhancing cybersecurity through initiatives related to the security and integrity of the software supply chain. Section 4 called for NIST to publish a variety of guidance that identifies practices to enhance software supply chain security, with references to standards, procedures, and criteria. The EO also directed NIST to initiate two labeling programs related to the Internet of Things (IoT) and software to inform consumers about the security of their products.