Pillar Three: Shape Market Forces to Drive Security and Resilience Strategic Objective 3.2: Drive the Development of Secure IoT Devices Initiative Number: 3.2.1 Initiative Title: Implement Federal Acquisition Regulation (FAR) requirements per the Internet of Things (IoT) Cybersecurity Improvement Act of 2020 Initiative Description The Office of Management and Budget, through the Office of Federal Procurement Policy, will work with the Federal Acquisition Regulatory Council to propose FAR changes in line with the Internet of Things Cybersecurity Improvement Act of 2020. NCS Reference The Administration will continue to improve IoT cybersecurity through Federal research and development (R&D), procurement, and risk management efforts, as directed in the IoT Cybersecurity Improvement Act of 2020. Responsible Agency: OMB Completion Date: 4Q FY23 Initiative Number: 3.2.2 Initiative Title: Initiate a U.S. Government IoT security labeling program Initiative Description Following the October 2022 White House event on this topic, the National Security Council will identify the broad contours of a U.S. Government Internet of Things (IoT) security labeling program and an agency to lead it. NCS Reference In addition, the Administration will continue to advance the development of IoT security labeling programs, as directed under EO 14028, “Improving the Nation’s Cybersecurity.” Responsible Agency: NSC Completion Date: 4Q FY23 NATIONAL CYBERSECURITY STRATEGY IMPLEMENTATION PLAN 29