Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

EVENTS

Workshop on Updating Manufacturer Guidance for Securable Connected Product Development

Name: Workshop on Updating Manufacturer Guidance for Securable Connected Product Development
Start: 2024-12-04T00:00:00-05:00
End: 2024-12-04T23:59:00-05:00
Location: National Cybersecurity Center of Excellence 9700 Great Seneca Hwy Rockville, MD 20850

NIST invites the cybersecurity and IoT communities to join a discussion on updating

Foundational Cybersecurity Activities for IoT Device Manufacturers (NIST IR 8259)

IoT Device Cybersecurity Capability Core Baseline (NIST IR 8259A)

IoT Non-Technical Supporting Capability Core Baseline (NIST IR 8259B)

Topics like the convergence and rise of Industrial IoT (IIoT), the introduction of new guidance from NIST (e.g., Secure Software Development Framework, Privacy Framework, Cybersecurity Framework 2.0), and cybersecurity for legacy products, systems, and environments are just a few examples of considerations that NISTIR 8259 could incorporate or expand on in a revision.

This Workshop will begin a conversation around these topics to identify useful new additions to this core IoT guidance.

Registration for in-person participation is now closed. Virtual registration will remain open through December 4, 2024.

Agenda:

Time	Title	Speaker(s)/Facilitators
9:00AM – 9:15AM	Welcome, Agenda, Goals for the day	Michael Fagan, NIST
9:15AM – 9:55AM	Building More Secure Devices Using Threat Modeling with MITRE EMB3D	David Keppler, Senior Principal Cybersecurity Engineer, MITRE Jack Cyprus, Cybersecurity Engineer, MITRE
9:55AM – 10:35AM	Secure by Design considerations for OT	Matthew Rogers, ICS Expert, CISA
10:35AM – 11:15AM	Life in Maintenance Mode: What it means to keep connected devices secure	Stacey Higginbotham, Policy Fellow at Consumer Reports
11:15AM – 11:55AM	Getting Smart: An Overview of IoT Privacy	Dylan Gilbert, Privacy Policy Advisor, NIST
11:55AM – 12:00PM	Closing of the Morning Hybrid Session	Michael Fagan, NIST
12:00PM – 1:00PM Lunch on your own (In-Person only for the rest of the day)
1:00PM – 2:00PM	Breakout Track 1– NIST IR 8259 Pre-Market Activities update Breakout Tracks #2 – NIST IR 8259 Post-Market Activities update	Sarbari Gupta, Electrosoft, Facilitator Greg Witte, Palydin, Facilitator
2:00PM – 2:15PM	Break
2:15PM – 3:15PM	Breakout Track 1– NIST IR 8259 Pre-Market Activities update Breakout Tracks #2 – NIST IR 8259 Post-Market Activities update	Sarbari Gupta, Electrosoft, Facilitator Greg Witte, Palydin, Facilitator
3:15PM – 3:30PM	Break
3:30PM – 4:00PM	Closing including thoughts from the breakouts	Michael Fagan, Greg Witte, Sarbari Gupta

Information technology, Cybersecurity, Privacy engineering, Internet of Things (IoT) and Privacy

conference

December 4, 2024

National Cybersecurity Center of Excellence
9700 Great Seneca Hwy
Rockville, MD 20850

Registration

Registration Contact:

crissy.robinson [at] nist.gov (Crissy Robinson)

Technical Contact

Barbara Bell Cuthill

barbara.cuthill@nist.gov

(301) 975-3273

Created October 10, 2024, Updated December 4, 2024