The Inner Circle

Expand all | Collapse all

NCCOE Trusted Internet of Things (IOT) Device Network-Layer Onboarding and Lifecycle Management Draft

  • 1.  NCCOE Trusted Internet of Things (IOT) Device Network-Layer Onboarding and Lifecycle Management Draft

    Posted 30 days ago
      |   view attached
    Hi All,

    The National Cybersecurity Center of Excellence (NCCoE) has released a draft project description Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management-Enhancing Internet Protocol-Based IoT Device and Network Security.
    Publication of this project description begins a process to gather comments to help us further identify and refine project requirements and scope. The comment period is now open and will close on April 19, 2021.

    Network-layer onboarding of an IoT device is the provisioning of network credentials to that device. The current lack of trusted IoT device onboarding processes leaves many networks vulnerable to having unauthorized devices connect to them. It also leaves devices vulnerable to being taken over by networks that are not authorized to onboard them.
    This NCCoE project will focus on approaches to trusted network-layer onboarding of IoT devices and lifecycle management of the devices. The NCCoE will build a trusted network-layer onboarding solution example using commercially available technology that will address a set of cybersecurity challenges aligned to the NIST Cybersecurity Framework. This project will result in a freely available NIST Cybersecurity Practice Guide.
    We Want to Hear from You!

    Read the project description and submit comments online by April 19, 2021.
    Comments on Draft Project Description - Trusted IoT Device Network-Layer Onboarding and Lifecycle Management

    ------------------------------
    Michael Roza CPA, CISA, CIA, MBA, Exec MBA
    ------------------------------


  • 2.  RE: NCCOE Trusted Internet of Things (IOT) Device Network-Layer Onboarding and Lifecycle Management Draft

    Posted 29 days ago
    Device onboarding and authentication are a big deal. I am forwarding this announcement to the CTO of the Industrial Internet Consortium, hoping that some consortium members can be cajoled into reading and commenting on this draft in the month left to do so. Thanks for sharing.

    ------------------------------
    Claude Baudoin
    Owner & Principal Consultant
    Cébé IT & Knowledge Management
    ------------------------------



  • 3.  RE: NCCOE Trusted Internet of Things (IOT) Device Network-Layer Onboarding and Lifecycle Management Draft

    Posted 28 days ago
    Hi Claude,

    Sounds great!

    IoT co-chairs
    @Brian Russell
    @Aaron G​​

    ------------------------------
    Michael Roza CPA, CISA, CIA, MBA, Exec MBA
    ------------------------------