# NIST Provides Telehealth Security Benchmark

NIST’s National Cybersecurity Center of Excellence (NCCoE) telehealth and remote patient monitoring security guide provides a reference architecture and implementation benchmark for device authentication, secure data transmission, endpoint management, cloud security, and sanitization of returned equipment. The guide is not legislation and creates no binding procurement requirements, appropriations, or contract awards, but it can inform health-sector solicitations and vendor assessments.

- Health IT contractors can use the guide’s practices to shape secure RPM platforms, system integration, device-management, and cybersecurity service offerings.
- Procurement teams may use the reference architecture to inform solicitation language and vendor evaluations; the guide itself does not mandate specific controls.
- Contractors supporting telehealth programs should assess how their device, data-transmission, cloud, and equipment-return processes align with the guide’s implementation benchmarks.

**Jurisdictions:** federal
**Industries:** Healthcare, Information Technology
**Topics:** Cybersecurity, Digital Infrastructure
**Published:** November 10, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)
- National Cybersecurity Center of Excellence (NCCoE)

### Sources
- [NIST SP 1800-30: Telehealth & RPM Security Guide — CASRAI](https://casrai.org/guides/nist-sp-1800-30) - CASRAI