8 January 2021 by Phillip Johnston • Last updated 15 August 2023 Note: This entry describes a core non-technical supporting capability a defined in the NIST Cybersecurity for IoT Program, specifically NISTIR 8295B: IoT Non-Technical Supporting Capability Core Baseline. The ability for the manufacturer and/or supporting entity to receive from the customer information and queries related to the cybersecurity of the IoT device Common Elements The following elements are commonly used to achieve this capability: The ability for the manufacturer and/or supporting entity to receive maintenance and vulnerability information (e.g., bug reporting capabilities, bug bounty programs) from their customers and …
Continue reading “Baseline Non-Technical Cybersecurity Capability: Information and Query Reception”