On December 4, 2020, the Internet of Things (IoT) Cybersecurity Improvement Act of 2020 (H.R. 1668, 116th Cong.) (the “Act”) was signed into law. This bipartisan bill requires the National Institute of Standards and Technology (NIST) to create minimum cybersecurity standards for IoT devices purchased or used by the federal government. Guidelines are to be developed over the next several months, so the full impact of the Act remains uncertain for now. However, the Act sets out a framework for the guidelines and provides a glimpse of what is to come for IoT device security.
Read the full article here.