What NIST IR 8228 - Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks requires
Organisations deploying Internet of Things devices should treat IoT cybersecurity and privacy risk management as a three-tier objective covering Protect Device Security, Protect Data Security, and Protect Individuals' Privacy, address the risk mitigation areas under each goal across the device lifecycle, adjust organisational policies and processes by updating the specific NIST Cybersecurity Framework Subcategories and NIST SP 800-37 Risk Management Framework tasks identified in Section 5.1, and implement updated risk mitigation practices that account for the high variability in IoT device types, capabilities, and usage.
Pillar: Industrial IoT & Energy · Authority: National Institute of Standards and Technology (NIST), Applied Cybersecurity Division, Information Technology Laboratory · Version: 1.0.0 · Last updated:
Primary source: https://www.nist.gov/publications/considerations-managing-internet-things-iot-cybersecurity-and-privacy-risks
SHA-256 integrity: 6f76272a12f7fab763170b8ffd2b3cd350a83f765e9e49c6775c1eb1e744f4ca
Primary Citations — 10 traced to source
- NIST IR 8228 Section 4: defines the three high-level risk mitigation goals - Protect Device Security, Protect Data Security, and Protect Individuals' Privacy - and lists the risk mitigation areas under each goal.
- NIST IR 8228 Section 4 Goal 1 risk mitigation areas: Asset Management - maintain a current accurate inventory of all IoT devices and their relevant characteristics throughout the devices' lifecycles; Vulnerability Management - identify and eliminate known vulnerabilities in IoT device software and firmware; Access Management - prevent unauthorised and improper physical and logical access; Device Security Incident Detection - monitor and analyse IoT device activity for signs of incidents.
+ 8 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/us-nist-ir-8228-iot-cyber-privacy-risk-considerations-2019.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/us-nist-ir-8228-iot-cyber-privacy-risk-considerations-2019.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/us-nist-ir-8228-iot-cyber-privacy-risk-considerations-2019
- Back to registry: Browse all 10,085 compliance nodes