Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.


The Computer Security Resource Center (CSRC) has information on many of NIST's cybersecurity- and information security-related projects, publications, news and events. CSRC supports people and organizations in government, industry, and academia—both in the U.S. and internationally. 

Highlights

Recent News

Key Derivation Using Pseudorandom Functions November 4, 2026
NIST is planning to revise Special Publication (SP) 800-108r1 (Revision 1), Recommendation for Key Derivation Using Pseudorandom Functions. The commen period will close on December 18, 2026.
Small Business Cybersecurity: Non-Employer Firms November 2, 2026
NIST has published Cybersecurity White Paper (CSWP) 50, "Small Business Cybersecurity: Non-Employer Firms." This supersedes NIST IR 7621 Revision 1 (2016), in its entirety.
NIST Releases IR 8621 November 2, 2026
NIST has published Internal Report (IR) 8621, NIST Workshop on SI Incident Management, on stakeholder perspectives and key findings from the May 14, 2026, workshop. Motivated by the federal directive "America's AI Action...
Transition to PQC Standards | NIST IR 8547 October 27, 2026
NIST publishes Internal Report (NIST IR) 8547, "Transition to Post-Quantum Cryptography Standards."
Governing and Managing ICT Risk Programs | Draft October 22, 2026
The initial public draft of NIST SP 800-221r1, "Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio," is now available for public...

View All News