The NIST Cybersecurity for IoT Program is drafting a publication on managing IoT security and privacy risks for federal systems. The Program is engaging with stakeholders to develop this publication, which is intended to have broad applicability for common security and privacy risks for IoT, and to introduce practical risk management considerations for IoT product selection, deployment, protection, and operation.
NIST is hosting a roundtable discussion during RSA to collect stakeholder input. This session is designed to engage with industry stakeholders to inform an understanding of the most relevant cybersecurity outcomes for IoT, and considerations for implementation of controls.
iotsecurity [at] nist.gov (RSVP)