Learn. What is the CPRT?
NIST seeks to accelerate the adoption of our cybersecurity and privacy standards, guidelines, and frameworks by making it much easier for users of NIST products to identify, locate, compare, and customize content across NIST’s standards, guidelines, and practices. This will also add value to our existing NIST guidance by delivering human- and machine-consumable information.
What is the Cybersecurity and Privacy Reference Tool (CPRT)?
The CPRT provides a centralized, standardized, and modernized mechanism for managing reference datasets (and offers a consistent format for accessing reference data from various NIST cybersecurity and privacy standards, guidelines, and Frameworks). This data can be exported into different data formats—and soon, we will be updating the tool so users can draw upon multiple NIST resources to build their own cybersecurity and privacy guidance.
What will the tool show me, exactly?
You’ll be able to see digitized reference data from certain NIST publications that can support numerous use cases (all in a standardized data format). These tabular datasets will make it simpler for users of NIST resources to identify, locate, compare, and customize content in and across NIST resources without needing to review hundreds of pages of narrative within publications.
What data formats are available?
XLSX: This is the common format used by Microsoft Excel.
JSON: All CPRT data uses a common format—so every document and query within the CPRT can use the same JSON schema. This schema provides a machine-readable view into the CPRT for users to interact with the data in a repeatable and predictable way. The schema is flat, containing only four top level elements (documents, elements, relationships, and relationship_types). This structure allows users to quickly iterate through the data and build any data structure that suits their use case.
