United States of America: National Institute of Standards and Technology closes consultation on Foundational Cybersecurity Activities for Internet of Things product manufacturers

On 31 October 2025, the National Institute of Standards and Technology closes the public consultation on Foundational Cybersecurity Activities for Internet of Things (IoT) product manufacturers. The draft sets out nine activities to improve IoT product security before and after sale. It expands guidance on risk assessment, threat modelling, and links to other frameworks. IoT manufacturers are urged to provide both technical and non-technical safeguards, including updates and vulnerability disclosure.