NIST publishes initial public draft of SP 800-213 Revision 1 on IoT product cybersecurity guidelines

Original title: Advancing Product Security: New IoT Guidance and New Engagement

NIST has released an initial public draft of SP 800-213 Revision 1, which establishes IoT product cybersecurity requirements and guidelines for federal government procurement and use. The update reflects NIST's ongoing effort to help organizations translate security guidance into practical, actionable operational decisions as IoT device complexity and cyber threats continue to evolve. Organizations managing IoT deployments should review the draft to understand new requirements and ensure their products and security practices align with updated federal standards.

What changed

• NIST released an initial public draft (IPD) of SP 800-213 Revision 1, updating its IoT Product Cybersecurity Guidelines for the Federal Government with revised cybersecurity requirements for IoT products used in federal systems

Who is affected

Federal government agencies, IoT device manufacturers and vendors supplying products to U.S. federal organizations, and organizations managing IoT deployments in compliance with federal standards