NIST Strengthens Focus on Privacy, IoT Security

The National Institute of Standards and Technology (NIST) has published a new draft of its SP 800-53 security specifications, with Revision 5 offering a strong focus on the Internet of Things and privacy.

NIST Strengthens Focus on Privacy, IoT SecurityIn a statement announcing the new draft, NIST offered the example of a smart city guideline advising that smart traffic monitoring sensors only capture data relevant to their specific task – monitoring traffic – and avoid the capture of drivers’ personal information. The organizations stressed that privacy is “fully integrated throughout the new draft,” and that the publication is aimed at businesses and other private sector organizations in addition to its traditional federal government audiences.

NIST has also announced that, together with the Department of Homeland Security, it will sponsor the 2018 Global City Teams Challenge, or GCTC, an innovation initiative for smart city solutions. It’s a good fit because the focus of the new GCTC will be digital security; thus the expert guidance provided by NIST’s SP 800-53 Revision 5 should come into play, while the DHS’s Cyber Security Division will lead that agency’s participation in the challenge.

In fact, the 2018 GCTC is being called the “Smart and Secure Cities and Communities Challenge”, or “SC3”, and will feature private sector participation from major companies like AT&T, Motorola, and Verizon. That should present an important opportunity for NIST to promote its Revision 5 guidelines as the organization welcomes comments on the draft.

The DHS’s Science and Technology Directorate (dubbed “S&T”) will delve into the details of SC3 on August 29th, the second day of this week’s 2017 GCTC Expo in Washington.