SSDF and IoT Cybersecurity Guidance: Building Blocks for IoT Product Security | allinfosecnews.com

June 22, 2023, noon | Katerina Megas, Michael Fagan, Barbara Cuthill, Murugiah Souppaya

Cybersecurity Insights www.nist.gov

NIST’s IoT cybersecurity guidance has long recognized the importance of secure software development (SSDF) practices, highlighted by the NIST IR 8259 series—such as the recommendation for documentation in Action 3.d of NIST IR 8259B, that manufacturers have considered and documented their “secure software development and supply chain practices used.” The NIST SSDF (NIST SP 800-218) describes software development practices that can aid manufacturers in developing IoT products by providing guidance for the secure development of software and firmware. These development …

action cybersecurity development documentation guidance iot iot cybersecurity nist practices product product security secure software security series software software development supply supply chain

More from www.nist.gov / Cybersecurity Insights

Updates on NIST’s Interagency International Cybersecurity Standardization Working Group 2 months ago | www.nist.gov

act build chair charge +14

NIST Celebrates National Entrepreneurship Week 2 months, 2 weeks ago | www.nist.gov

NIST’s International Cybersecurity and Privacy Engagement Update – International Dialogues, Workshops, and Translations 2 months, 3 weeks ago | www.nist.gov

conversations cybersecurity end engagement +12

A Note on progress…NIST’s Digital Identity Guidelines. 4 months, 2 weeks ago | www.nist.gov

august digital forward guidelines +10

The UK-US Blog Series on Privacy-Preserving Federated Learning: Introduction 4 months, 3 weeks ago | www.nist.gov

availability blog collaboration computing +16

NCCoE 5G Cybersecurity: Connecting the Dots Between IT and Teleco Cybersecurity Capabilities in 5G Systems 4 months, 4 weeks ago | www.nist.gov

addition agriculture attack attack surface +18

Cybersecurity Awareness Month 2023 Blog Series | Recognizing and Reporting Phishing 6 months, 1 week ago | www.nist.gov

awareness blog cybersecurity cybersecurity awareness +11

Cybersecurity Awareness Month 2023 Blog Series | Using Strong Passwords and a Password Manager 6 months, 3 weeks ago | www.nist.gov

awareness blog cybersecurity cybersecurity awareness +12

NIST Unveils Newly Named Human-Centered Cybersecurity Program 7 months ago | www.nist.gov

cybersecurity cybersecurity program human nist +6

Social Engineer For Reverse Engineering Exploit Study

@ Independent study | Remote

View on infosec-jobs.com

Associate Manager, BPT Infrastructure & Ops (Security Engineer)

@ SC Johnson | PHL - Makati

View on infosec-jobs.com

Cybersecurity Analyst - Project Bound

@ NextEra Energy | Jupiter, FL, US, 33478

View on infosec-jobs.com

Lead Cyber Security Operations Center (SOC) Analyst

@ State Street | Quincy, Massachusetts

View on infosec-jobs.com

Junior Information Security Coordinator (Internship)

@ Garrison Technology | London, Waterloo, England, United Kingdom

View on infosec-jobs.com

Sr. Security Engineer

@ ScienceLogic | Reston, VA

View on infosec-jobs.com