Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	800-128	Guide for Security-Focused Configuration Management of Information Systems SP 800-128 Guide for Security-Focused Configuration Management of Information Systems 10/10/2019 Status: Final Download: SP 800-128 (DOI); Local Download	Final	10/10/2019
SP	800-140A	CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140A (Draft) CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 10/09/2019 Status: Draft Download: Draft SP 800-140A	Draft	10/09/2019
SP	800-140D	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) SP 800-140D (Draft) CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) 10/09/2019 Status: Draft Download: Draft SP 800-140D	Draft	10/09/2019
SP	800-140F	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) SP 800-140F (Draft) CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) 10/09/2019 Status: Draft Download: Draft SP 800-140F	Draft	10/09/2019
SP	800-140B	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B (Draft) CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 10/09/2019 Status: Draft Download: Draft SP 800-140B	Draft	10/09/2019
SP	800-140C	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C (Draft) CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 10/09/2019 Status: Draft Download: Draft SP 800-140C	Draft	10/09/2019
SP	800-140	FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140 (Draft) FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 10/09/2019 Status: Draft Download: Draft SP 800-140	Draft	10/09/2019
SP	800-140E	CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790:2012 Annex E and ISO/IEC 24579:2017 SP 800-140E (Draft) CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790:2012 Annex E and ISO/IEC 24579:2017 10/09/2019 Status: Draft Download: Draft SP 800-140E	Draft	10/09/2019
White Paper		[Project Description] Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) White Paper (Draft) [Project Description] Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) 10/08/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	10/08/2019
SP	800-57 Part 1 Rev. 5	Recommendation for Key Management: Part 1 – General SP 800-57 Part 1 Rev. 5 (Draft) Recommendation for Key Management: Part 1 – General 10/08/2019 Status: Draft Download: SP 800-57 Part 1 Rev. 5 (Draft) (DOI); Local Download	Draft	10/08/2019
NISTIR	8268	Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process NISTIR 8268 Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process 10/07/2019 Status: Final Download: NISTIR 8268 (DOI); Local Download; Lightweight Cryptography project	Final	10/07/2019
NISTIR	8267	Security Review of Consumer Home Internet of Things (IoT) Products NISTIR 8267 (Draft) Security Review of Consumer Home Internet of Things (IoT) Products 10/01/2019 Status: Draft Download: NISTIR 8267 (Draft) (DOI); Local Download; Submit Comments; Project Homepage	Draft	10/01/2019
NISTIR	8183A Vol. 3	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case NISTIR 8183A Vol. 3 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 3 (DOI); Local Download	Final	9/30/2019
NISTIR	8183A Vol. 2	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case NISTIR 8183A Vol. 2 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 2 (DOI); Local Download	Final	9/30/2019
NISTIR	8183A Vol. 1	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance NISTIR 8183A Vol. 1 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 1 (DOI); Local Download	Final	9/30/2019
SP	800-207	Zero Trust Architecture SP 800-207 (Draft) Zero Trust Architecture 9/23/2019 Status: Draft Download: SP 800-207 (Draft) (DOI); Local Download; Comment template	Draft	9/23/2019
SP	1800-23	Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry SP 1800-23 (Draft) Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 9/23/2019 Status: Draft Download: Draft SP 1800-23 volumes and Project Homepage; Submit comments	Draft	9/23/2019
SP	1800-24	Securing Picture Archiving and Communication System (PACS) SP 1800-24 (Draft) Securing Picture Archiving and Communication System (PACS) 9/16/2019 Status: Draft Download: Draft SP 1800-24 volumes and Project Homepage; Submit comments	Draft	9/16/2019
White Paper		NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management (Preliminary Draft) White Paper (Draft) NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management (Preliminary Draft) 9/09/2019 Status: Draft Download: Preliminary Draft; Additional info (comment template; core Excel file); NIST Informative References; Cybersecurity Insights blog post	Draft	9/09/2019
SP	800-160 Vol. 2	Developing Cyber Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 (Draft) Developing Cyber Resilient Systems: A Systems Security Engineering Approach 9/04/2019 Status: Draft Download: Draft (FPD) SP 800-160 Vol. 2; Draft (FPD) SP 800-160 Vol. 2 (with line numbers); Comment Template	Draft	9/04/2019
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 2 Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 8/29/2019 Status: Final Download: SP 800-52 Rev. 2 (DOI); Local Download	Final	8/29/2019
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials SP 1800-12 Derived Personal Identity Verification (PIV) Credentials 8/27/2019 Status: Final Download: SP 1800-12 (DOI); Local Download; Web version; Project Homepage	Final	8/27/2019
White Paper		[Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources White Paper [Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 8/15/2019 Status: Final Download: Project Description; Project homepage	Final	8/15/2019
Conference Paper		Perceptions of Smart Home Privacy and Security Responsibility, Concerns, and Mitigations Conference Paper Perceptions of Smart Home Privacy and Security Responsibility, Concerns, and Mitigations 8/11/2019 Status: Final Download: Poster description	Final	8/11/2019
Conference Paper		Security Awareness in Action: A Case Study [extended abstract] Conference Paper Security Awareness in Action: A Case Study [extended abstract] 8/11/2019 Status: Final Download: Paper	Final	8/11/2019

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Public Drafts
- View By Series
Other Pubs

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Current Publications

Publications

Recent Publications

Current Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Current Publications

Publications

Recent Publications

Current Publications

Computer Security
Resource Center