United States of America: National Institute of Standards and Technology opened consultation on Foundational Cybersecurity Activities for Internet of Things product manufacturers

On 30 September 2025, the National Institute of Standards and Technology opened a public consultation on Foundational Cybersecurity Activities for Internet of Things (IoT) product manufacturers, until 31 October 2025. The draft sets out nine activities to improve IoT product security before and after sale. It expands guidance on risk assessment, threat modelling, and links to other frameworks. IoT manufacturers are urged to provide both technical and non-technical safeguards, including updates and vulnerability disclosure.