NIST SP 800-183

United States

v2016

7 domains

30 controls

Special Publication providing security considerations for the Internet of Things (IoT).

Verified

NIST SP 800-183 is a compliance framework from United States with 7 domains and 30 controls that map to 9 other frameworks. The largest domains are NoT Elements (6 controls), NIST SP 800-183: Asset Management (5 controls), NIST SP 800-183: Information Security Policies (5 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (7)

NIST SP 800-183: Asset Management

5 controls

Information asset management (NIST SP 800-183)

Controls in the NIST SP 800-183: Asset Management domain of NIST SP 800-183: 5 controls
Code	Title	Description
SP800-183-DATA-FLOW	Data Flow and Snapshots	The movement of data through the primitives over time, with snapshots capturing the state of the network of things at in...
SP800-183-ENVIRONMENT	Operating Environment and Latency	Environmental factors, including latency between primitives and the geographic distribution of devices, that affect the...
SP800-183-P4-EUTILITY	Primitive 4: eUtility (external utility)	A software or hardware product or service (for example cloud, computer, database) that executes processes or feeds data...
SP800-183-P5-TRIGGER	Primitive 5: Decision Trigger	Creates the final result(s) needed to satisfy the purpose, specification, and requirements of a specific network of thin...
SP800-183-RELIABILITY	Reliability and Trust Across Primitives	Reliability, security, and data integrity considerations applied across the five primitives and their interactions to es...

NIST SP 800-183: Information Security Policies

5 controls

Organizational information security policies (NIST SP 800-183)

Controls in the NIST SP 800-183: Information Security Policies domain of NIST SP 800-183: 5 controls
Code	Title	Description
SP800-183-P1-SENSOR	Primitive 1: Sensor	An electronic utility that measures physical properties such as temperature, acceleration, weight, sound, or location, a...
SP800-183-P2-AGGREGATOR	Primitive 2: Aggregator	A software implementation based on mathematical functions that transforms groups of raw sensor data into intermediate, a...
SP800-183-P2-CLUSTER	Aggregator Actor: Cluster	An abstract grouping of sensors (or other devices) whose data is collected and aggregated; clusters may overlap and chan...
SP800-183-P2-WEIGHT	Aggregator Actor: Weight	The degree to which a particular sensor's data influences an aggregator's computation, reflecting trust and relevance.
SP800-183-P3-CHANNEL	Primitive 3: Communication Channel	A medium by which data is transmitted between sensors, aggregators, communication channels, eUtilities, and decision tri...

NoT Elements

6 controls

Controls in the NoT Elements domain of NIST SP 800-183: 6 controls
Code	Title	Description
NoT.ELEM.COST	Cost Element	Document the Cost element that captures expenses and risks associated with operating and maintaining a Network of Things...
NoT.ELEM.DEV	Device ID Element	Document the Device ID element that uniquely identifies each NoT primitive instance enabling provenance, authentication,...
NoT.ELEM.ENV	Environment Element	Document the Environment element that describes the universe in which all NoT primitives operate including physical and...
NoT.ELEM.GEO	Geographic Location Element	Document the Geographic Location element that captures the physical place where NoT primitives reside and the implicatio...
NoT.ELEM.OWN	Owner Element	Document the Owner element identifying the responsible person, organization, or entity for each primitive and the data i...
NoT.ELEM.SNAP	Snapshot Element	Document the Snapshot element that captures an instant in time when sensor data and aggregator state were observed enabl...

NoT Primitives

5 controls

Controls in the NoT Primitives domain of NIST SP 800-183: 5 controls
Code	Title	Description
NoT.PRIM.AGGR	Aggregator Primitive	Identify and govern Aggregator primitives that are software implementations that transform groups of raw data into inter...
NoT.PRIM.COMM	Communication Channel Primitive	Identify and govern Communication Channel primitives that provide the medium by which data is transmitted between NoT pr...
NoT.PRIM.DTRIG	Decision Trigger Primitive	Identify and govern Decision Trigger primitives that create the final result needed to satisfy the purpose, specificatio...
NoT.PRIM.EUTIL	External Utility Primitive	Identify and govern External Utility primitives such as cloud services or computing infrastructure that perform computat...
NoT.PRIM.SENSOR	Sensor Primitive	Identify and govern Sensor primitives that observe physical or electronic phenomena and produce data inputs to the Netwo...

Risk Considerations

1 controls

Controls in the Risk Considerations domain of NIST SP 800-183: 1 controls
Code	Title	Description
NoT.RISK.MISSION	Mission Risk for NoT Deployments	Assess mission risk arising from NoT deployments including safety, privacy, and operational impact of primitive failure...

Security Considerations

5 controls

Controls in the Security Considerations domain of NIST SP 800-183: 5 controls
Code	Title	Description
NoT.SEC.AGGR	Aggregator Security	Apply security controls to Aggregator primitives including integrity of aggregation logic, protection against poisoned i...
NoT.SEC.COMM	Communication Channel Security	Apply security controls to Communication Channel primitives including encryption, authentication, integrity protection,...
NoT.SEC.DTRIG	Decision Trigger Security	Apply security controls to Decision Trigger primitives including authorization for actions, override controls, and audit...
NoT.SEC.EUTIL	External Utility Security	Apply security controls and oversight to External Utility primitives including vendor risk management, secure integratio...
NoT.SEC.SENSOR	Sensor Security	Apply security controls to Sensor primitives including physical protection, firmware integrity, authentication, and tamp...

Trust in Networks of Things

3 controls

Controls in the Trust in Networks of Things domain of NIST SP 800-183: 3 controls
Code	Title	Description
NoT.TRUST.DATA	Data Trustworthiness	Establish trustworthiness of data generated, transmitted, and acted upon within the Network of Things through integrity,...
NoT.TRUST.IDENT	Primitive Identity Trust	Establish trust in the identity of each NoT primitive through unique identifiers, cryptographic credentials, and lifecyc...
NoT.TRUST.RELY	Reliability of Primitives	Establish reliability of NoT primitives ensuring they perform their function consistently within defined tolerances and...

Your Compliance Coverage

If you comply with NIST SP 800-183, you already cover:

NIST SP 800-53 Rev 5

33%

10 controls mapped

Compare →

ISO 22301:2019

2 controls mapped

Compare →

ISO 37301:2021

2 controls mapped

Compare →

+ 6 more: ISO 55001:2014 (7%), ISO 37001:2016 (7%)

See all 9 mapped frameworks ↓

Maps to 9 other frameworks

30 total controls

NIST SP 800-53 Rev 5

10 source controls mapped|8 target controls covered

33%

ISO 22301:2019