GovWhitePapers Logo

Sorry, your browser is not compatible with this application. Please use the latest version of Google Chrome, Mozilla Firefox, Microsoft Edge or Safari.

IoT Device Cybersecurity Capability Core Baseline

Device cybersecurity capabilities are cybersecurity features or functions that computing devices provide through their own technical means (i.e., device hardware and software). This publication defines an Internet of Things (IoT) device cybersecurity capability core baseline, which is a set of device capabilities generally needed to support common cybersecurity controls that protect an organization’s devices as well as device data, systems, and ecosystems. The purpose of this publication is to provide organizations a starting point to use in identifying the device cybersecurity capabilities for new IoT devices they will manufacture, integrate, or acquire. This publication can be used in conjunction with NISTIR 8259, Foundational Cybersecurity Activities for IoT Device Manufacturers.


Interested in IoT? Check out this GovWhitePapers blog post! You can also find events on IoT on our sister site, GovEvents.


  • Author(s):
  • Michael Fagan
  • Katerina N. Megas
  • Karen Scarfone
  • Matthew Smith
  • Share this:
  • Share on Facebook
  • Share on Twitter
  • Share via Email
  • Share on LinkedIn
IoT Device Cybersecurity Capability Core Baseline
  • White Paper
Website:Visit Publisher Website
Publisher:National Institute of Standards and Technology (NIST)
Published:May 1, 2020
License:Public Domain

Featured Content

Contact Publisher

Claim Content