Hi All,
The National Cybersecurity Center of Excellence (NCCoE) has released a draft project description Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management-Enhancing Internet Protocol-Based IoT Device and Network Security.
Publication of this project description begins a process to gather comments to help us further identify and refine project requirements and scope. The comment period is now open and will close on April 19, 2021.
Network-layer onboarding of an IoT device is the provisioning of network credentials to that device. The current lack of trusted IoT device onboarding processes leaves many networks vulnerable to having unauthorized devices connect to them. It also leaves devices vulnerable to being taken over by networks that are not authorized to onboard them.
This NCCoE project will focus on approaches to trusted network-layer onboarding of IoT devices and lifecycle management of the devices. The NCCoE will build a trusted network-layer onboarding solution example using commercially available technology that will address a set of cybersecurity challenges aligned to the NIST Cybersecurity Framework. This project will result in a freely available NIST Cybersecurity Practice Guide.
We Want to Hear from You!
Read the project description and submit comments online by April 19, 2021.
Comments on Draft Project Description - Trusted IoT Device Network-Layer Onboarding and Lifecycle Management------------------------------
Michael Roza CPA, CISA, CIA, MBA, Exec MBA
------------------------------