The National Institute of Standards and Technology's Cybersecurity for the Internet of Things and Privacy Engineering Programs has issued a draft internal report on managing cybersecurity and privacy risks in IoT devices. Draft NISTIR 8228: Considerations for Managing IoT Cybersecurity and Privacy Risks is open for public comment until Oct. 24. The draft identifies three considerations that may affect IoT privacy and security and includes recommendations for organizations on their approach to IoT risk. Though it welcomes all feedback, NIST is specifically interested in several aspects outlined in the "Full Story" link below. Editor's Note: NIST will host its first privacy framework workshop ahead of the IAPP's Privacy. Security. Risk. in Austin, Texas, Oct. 16. 
Full Story