Baseline Cybersecurity Capability: Software Update

10 December 2020 by Phillip Johnston • Last updated 15 August 2023 Note: This entry describes a core capability a defined in the NIST Cybersecurity for IoT Program. The IoT device’s software can be updated by authorized entities only using a secure and configurable mechanism. Common Elements The following elements are commonly used to achieve this capability: The ability to update the device’s software through remote and/or local means The ability to verify and authenticate any update before installing it The ability for authorized entities to roll back updated software to a previous version The ability to restrict updating actions …

To access this content, you must purchase a Membership - check out the different options here. If you're a member, log in.