IoT device security

NIST IR 8259A — IoT Device Cybersecurity

IoT Device Cybersecurity Capability Core Baseline

Evaluate whether an IoT or connected cyber-physical device provides the foundational technical cybersecurity capabilities identified by NIST IR 8259A. The assessment addresses device identification, configuration, data protection, interface access, software updates, and cybersecurity state awareness.

This assessment is a cybersecurity readiness and decision-support tool. NIST IR 8259A provides a baseline of generally applicable IoT device cybersecurity capabilities and does not mandate implementation of every capability for every device or environment. Applicability and implementation should be evaluated based on the device, deployment architecture, operating environment, threat model, organizational risk, and applicable regulatory or contractual requirements. VoltVerify does not provide certification or guarantee compliance with NIST guidance.

39 original readiness questions across six baseline capabilities. Scope any connected device, including EVSE, inverters, storage systems, gateways, meters, sensors, and controllers. No supplemental catalog capability is included in the initial score.