Congressional IoT Definition

Earlier this week I took exception to the inability of congressional staffers to come up with a workable definition of ‘internet of things’ (IOT or IoT if you prefer). Well, I finally found a reasonably workable definition in a proposed amendment to HR 5515, so I feel honor bound to mention it.

On Tuesday Sen. Gardner (R,CO) proposed SA 2825 (pg S3849). It would add a new subtitle to HR 5515, Subtitle G—Internet of Things Cybersecurity Improvement Act. In the proposed §1072(a) it defines ‘a covered [IoT] device’ as a physical object that:

• Is capable of connecting to and is in regular connection with the Internet or internal networks of the Department [DOD] that are connected to the Internet;

• Has computer processing capabilities that can collect, send, or receive data; and

• Does not include advanced or general purpose computing devices, including personal computing systems, smart mobile communications devices, programmable logic controls, mainframe computing systems, and motor vehicles.

Depending on the type of IoT that we are discussing we can argue about what should or should not be included in exclusion portion of the definition. It is clear, however, that the exclusion subparagraph is necessary to make the definition of IoT device workable.

Kudos to Sen. Gardner’s staff.