Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.


The Computer Security Resource Center (CSRC) has information on many of NIST's cybersecurity- and information security-related projects, publications, news and events. CSRC supports people and organizations in government, industry, and academia—both in the U.S. and internationally. 

Highlights

Recent News

Small Business Cybersecurity: Non-Employer Firms November 2, 2026
NIST has published Cybersecurity White Paper (CSWP) 50, "Small Business Cybersecurity: Non-Employer Firms." This supersedes NIST IR 7621 Revision 1 (2016), in its entirety.
NIST Releases IR 8621 November 2, 2026
NIST has published Internal Report (IR) 8621, NIST Workshop on SI Incident Management, on stakeholder perspectives and key findings from the May 14, 2026, workshop. Motivated by the federal directive "America's AI Action...
Transition to PQC Standards | NIST IR 8547 October 27, 2026
NIST publishes Internal Report (NIST IR) 8547, "Transition to Post-Quantum Cryptography Standards."
Governing and Managing ICT Risk Programs | Draft October 22, 2026
The initial public draft of NIST SP 800-221r1, "Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio," is now available for public...
NIST SP 800-100r1 ipd Released for Comments October 21, 2026
SP 800-100r1 restructures the handbook to align with the general organization of the NIST Cybersecurity Framework (CSF) 2.0 and provides high-level summaries of key cybersecurity topics, including governance, risk management,...

View All News