PRE-DRAFT Call for Comments: IoT Device Cybersecurity Requirement Catalog
NIST invites comments on revising SP 800‑213A IoT device guidance through 15 October 2026 to align with new product guidelines and CSF 2.0.
· 1 source · best source: official
What happened
The National Institute of Standards and Technology (NIST) has opened a public comment period for a draft revision of NIST SP 800‑213A, the IoT Device Cybersecurity Requirement Catalog. The revision will incorporate lessons from the draft IoT Product Cybersecurity Guidelines (SP 800‑213 Rev. 1) and align with NIST CSF 2.0 and SP 800‑53 Rev. 5.2.0. Comments are accepted until 15 October 2026, after which NIST will produce an initial revision for federal agencies and their contractors. No penalties or deadlines beyond the comment window are imposed.
Why it matters
Stakeholders developing or procuring IoT solutions for federal contracts should monitor the upcoming SP 800‑213A update and prepare to map existing controls to the revised requirements.
Business impact
Organizations may need to revise internal IoT security policies and procurement checklists to reflect the forthcoming guidance, affecting design, testing, and documentation processes.
Checklist
Review current IoT security controlsMedium priority
Compare existing device controls with the draft SP 800‑213A topics and note gaps before the final guidance is issued.
Who reported it
The original sources are no longer available.
Discussion
No comments yet. Start the discussion.
This summary was drafted automatically from the sources above. Check the original publications before acting on it. How we write summaries · Report an error