National Online Informative References Program OLIR

Informative Reference Catalog

The Online Informative Reference Catalog contains all the Reference Data—Informative References and Derived Relationship Mappings (DRMs)—for the National Online Informative References (OLIR) Program. All Reference Data in the Informative Reference Catalog has been validated against the requirements of NIST Interagency Report (IR) 8278A, National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers. If interested in participating in the OLIR program, please refer to the Informative Reference submission page.

The OLIR Catalog provides an interface for Developers and Users to view Informative References and analyze Reference Data. The Catalog includes links to draft content that is being evaluated during a 30-day public comment period and final versions that have completed the public comment period.

For more information on the National Online Informative References (OLIR) Program, refer to NISTIR 8278, National Online Informative References (OLIR) Program: Program Overview and OLIR Uses which describes the OLIR Program, focusing on explaining what OLIRs are, how they can be beneficial, and how subject matter experts can contribute OLIRs.

Representations and Warranties

Certain commercial entities, equipment, or materials may be identified in this Web site or linked Web sites in order to support OLIR understanding and use. Such identification is not intended to imply recommendation or endorsement by NIST, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose.

Derived Relationship Mapping

Advanced Search

Informative Reference (ver) Reference Document Posted Date Focal Document Submitting Organization Authority Category of
Submitter
NIST-SP-800-181-to-Framework-v1.1 (1.0.0) (More Details) NIST SP 800-181 - National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework 11/23/20 Cybersecurity Framework v1.1 National Institute of Standards and Technology Owner Public Sector
Framework-v1.1-to-Privacy-Framework-v1.0 (1.0.0) (More Details) Framework for Improving Critical Infrastructure Cybersecurity 10/20/20 Privacy Framework v1.0 National Institute of Standards and Technology Owner Public Sector
NISTIR-8286-to-CSF-v1-1 (1.0.0) (More Details) Integrating Cybersecurity and Enterprise Risk Management (ERM) 10/20/20 Cybersecurity Framework v1.1 National Institute of Standards and Technology Owner Public Sector
COBIT 2019 (1.0.0) (More Details) COBIT 2019 08/26/20 Cybersecurity Framework v1.1 ISACA Owner Private Sector
NIST-Privacy-Framework-v1-to-NIST-CSF-v1-1 (1.0.0) (More Details) NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management 05/19/20 Cybersecurity Framework v1.1 NIST Owner Public Sector
ts mitigation™ -open (1.0.0) (More Details) ts mitigation™ - open v1.1 05/11/20 Cybersecurity Framework v1.1 Threat Sketch, LLC Owner Private Sector
HITRUST-CSF-v9-3-1-to-NIST-CSF-v1-1 (1.0.0) (More Details) HITRUST CSF v9.3.1 03/10/20 Cybersecurity Framework v1.1 HITRUST Alliance; Standards Owner Private Sector
CIS Critical Security Controls (1.0.0) (More Details) CIS Controls Version 7.1 11/21/19 Cybersecurity Framework v1.1 Center for Internet Security Owner Private Sector
Factor Analysis of Information Risk (FAIR) - Risk Analysis Mapping (1.0.0) (More Details) C13G - OpenFAIR Risk Analysis 11/20/19 Cybersecurity Framework v1.1 FAIR Institute/OpenGroup Non-Owner Private Sector
Factor Analysis of Information Risk (FAIR) - Risk Taxonomy Mapping (1.0.0) (More Details) C13K - OpenFAIR Risk Taxonomy 11/20/19 Cybersecurity Framework v1.1 FAIR Institute/OpenGroup Non-Owner Private Sector
HITRUST-CSF-v9-2-to-NIST-CSF-v1-1 (1.0.0) (More Details) HITRUST CSF v9.2 11/19/19 Cybersecurity Framework v1.1 HITRUST Alliance; Standards Owner Private Sector
ISF Standard of Good Practice for Information Security 2018 Online Informative Reference to the NIST Cybersecurity Framework (1.0.0) (More Details) ISF Standard of Good Practice for Information Security 2018 11/14/19 Cybersecurity Framework v1.1 Information Security Forum Owner Private Sector
NIST Cybersecurity Framework Informative Reference for 800-171 Rev. 1 (1.0.0) (More Details) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 11/13/19 Cybersecurity Framework v1.1 NIST Owner Public Sector

Contacts

National Online Informative References Program
olir@nist.gov

Created September 08, 2020, Updated November 24, 2020