mNo edit summary Tag: Source edit |
m (→Overview) Tag: Source edit |
||
| (One intermediate revision by the same user not shown) | |||
| Line 5: | Line 5: | ||
== Overview == |
== Overview == |
||
| − | Federal agencies will increasingly use [[Internet of Things]] ([[IoT]]) [[device]]s for the mission benefits they can offer, but care must be taken in the [[acquisition]] and [[implementation]] of [[IoT device]]s. This publication contains background and recommendations to help federal agencies consider how an [[IoT device]] they plan to [[acquire]] can [[integrate]] into a [[federal information system]]. [[IoT device]]s and their support for [[security controls]] are presented in the context of organizational and [[system risk management]]. This publication provides guidance on considering [[system security]] from the [[device]] perspective. This allows for the [[identification]] of [[device cybersecurity]] requirements — the abilities and actions a federal agency will expect from an [[IoT device]] and its [[manufacturer]] and/or [[third parties]], respectively. |
+ | Federal agencies will increasingly use [[Internet of Things]] ([[IoT]]) [[device]]s for the mission benefits they can offer, but care must be taken in the [[acquisition]] and [[implementation]] of [[IoT device]]s. This publication contains background and recommendations to help federal agencies consider how an [[IoT device]] they plan to [[acquire]] can [[integrate]] into a [[federal information system]]. [[IoT device]]s and their support for [[security controls]] are presented in the context of organizational and [[system]] [[risk management]]. This publication provides guidance on considering [[system security]] from the [[device]] perspective. This allows for the [[identification]] of [[device]] [[cybersecurity]] requirements — the abilities and actions a federal agency will expect from an [[IoT device]] and its [[manufacturer]] and/or [[third parties]], respectively. |
[[Category:Publication]] |
[[Category:Publication]] |
||
Latest revision as of 04:19, 17 December 2020
Citation[]
- National Institute of Standards and Technology, (Draft) IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements (NIST Special Publication 800-213) (Dec. 2020) (full-text).
Overview[]
Federal agencies will increasingly use Internet of Things (IoT) devices for the mission benefits they can offer, but care must be taken in the acquisition and implementation of IoT devices. This publication contains background and recommendations to help federal agencies consider how an IoT device they plan to acquire can integrate into a federal information system. IoT devices and their support for security controls are presented in the context of organizational and system risk management. This publication provides guidance on considering system security from the device perspective. This allows for the identification of device cybersecurity requirements — the abilities and actions a federal agency will expect from an IoT device and its manufacturer and/or third parties, respectively.