Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

News & Updates

Stay informed as the Information Technology Laboratory’s Cybersecurity and Privacy Program releases publications, schedules virtual and in-person events, and announces other important developments.

Subscribe to our email updates.

Visit these additional NIST sites to learn more about:

  • NVD: National Vulnerability Database news and status updates
  • NICE: National Initiative for Cybersecurity Education news and events
  • NCCoE: National Cybersecurity Center of Excellence news and events
  • NIST-wide cybersecurity and privacy news and events
 
Showing 11 matching records.
NIST Releases Revision to SP 800-53 Controls
August 27, 2025

NIST has issued Special Publication (SP) 800-53 Release 5.2.0, Security and Privacy Controls for Information Systems and Organizations.

Draft SP 800-157R1 and SP 800-217 Public Comment
November 14, 2024

The final public drafts (fpd) of NIST Special Publication (SP) 800-157 Revision 1, Guidelines for Derived Personal Identity Verification (PIV) Credentials, and SP 800-217, Guidelines for Personal Identity Verification (PIV) Federation, are now available for public review and comment. The public comment period for both final drafts are open through January 10, 2025.

Cybersecurity and Privacy Reference Tool Update
November 7, 2023

NIST has issued SP 800-53 Release 5.1.1 in the Cybersecurity and Privacy Reference Tool (CPRT).

NIST Invites Public Comments on SP 800-53 Controls
October 17, 2023

NIST is issuing one new proposed control and two control enhancements with corresponding assessment procedures for an expedited 2-week public comment period for October 17–31, 2023.

NIST Releases Two Draft Guidelines on PIV Credentials
January 10, 2023

NIST is announcing the initial public drafts of NIST SP 800-157r1 (Revision 1), "Guidelines for Derived Personal Identity Verification (PIV) Credentials," and NIST SP 800-217, "Guidelines for Personal Identity Verification (PIV) Federation." 

Guide to Operational Technology (OT) Security: NIST Requests Comments
April 26, 2022

NIST has released the initial public draft of NIST Special Publication (SP) 800-82r3, Guide to Operational Technology (OT) Security, which provides guidance on how to improve the security of OT systems.  The deadline to submit comments is July 1, 2022.

SP 800-53 Revision 5 Published
September 23, 2020

NIST Special Publication (SP) 800-53 Revision 5, "Security and Privacy Controls for Information Systems and Organizations," represents a multi-year effort to develop the next generation of controls needed to strengthen and support the Federal Government and critical infrastructure sectors.

RMF Update: NIST Publishes SP 800-37 Rev. 2
December 20, 2018

NIST has published an update to its Risk Management Framework specification, in NIST Special Publication (SP) 800-37 Revision 2.

Final Public Draft SP 800-37 Rev 2 Available for Comment
October 2, 2018

The final public draft of NIST SP 800-37 Revision 2, Risk Management Framework for Information Systems and Organizations--A System Life Cycle Approach for Security and Privacy, is now available. The public comment period closes October 31, 2018.

NIST Releases Draft SP 800-37 Rev 2
May 9, 2018

The initial public draft of SP 800-37 Revision 2, Risk Management Framework for Information Systems and Organizations, is available for public comment until June 22, 2018.

Initial Public Draft Special Publication 800-82 Revision 2
May 13, 2014

NIST announces the release of Special Publication 800-82, Revision 2, Guide to Industrial Control System (ICS) Security. Special Publication 800-82 provides guidance on how to improve the security in Industrial Control Systems (ICS), ...