Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
IR (NISTIR)	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
CSWP	NIST Cybersecurity White Papers General white papers, thought pieces, and official cybersecurity- and privacy-related papers not published as a FIPS, SP, or IR.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins (1990-2020) Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. More of these publications from before 2008 will be added to this database.

Inclusive language. We recognize that some NIST publications contain potentially biased terminology. As we revise publications, we are reviewing and editing that language based on NIST’s inclusive language guidance. New publications in development will also follow that guidance.

See NIST Publications for additional Cybersecurity Publications.

More info:
- Download a spreadsheet (XLSX) of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins, and White Papers
- RSS/Atom and JSON feeds are available for our Draft Publications Open for Comment
- See the Crypto Publication Review Project for current reviews of numerous cryptography standards, recommendations, and guidelines.
- Learn about Digital Object Identifiers (DOI)

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	1800-36	Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security (Preliminary Draft) SP 1800-36 (Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security (Preliminary Draft) 12/05/2022 Status: Draft Download: NIST SP 1800-36A iprd; Project homepage	Draft	12/05/2022
SP	1800-22	Mobile Device Security: Bring Your Own Device (BYOD) (2nd Draft) SP 1800-22 (Draft) Mobile Device Security: Bring Your Own Device (BYOD) (2nd Draft) 11/29/2022 Status: Draft Download: NIST SP 1800-22 2pd; Project homepage	Draft	11/29/2022
SP	800-215	Guide to a Secure Enterprise Network Landscape SP 800-215 Guide to a Secure Enterprise Network Landscape 11/17/2022 Status: Final Download: SP 800-215 (DOI); Local Download	Final	11/17/2022
NISTIR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response NISTIR 8286D Using Business Impact Analysis to Inform Risk Prioritization and Response 11/17/2022 Status: Final Download: NISTIR 8286D (DOI); Local Download; See NISTIR 8286 Supplemental Material	Final	11/17/2022
SP	800-160 Vol. 1 Rev. 1	Engineering Trustworthy Secure Systems SP 800-160 Vol. 1 Rev. 1 Engineering Trustworthy Secure Systems 11/16/2022 Status: Final Download: SP 800-160 Vol. 1 Rev. 1 (DOI); Local Download; Systems Security Engineering (SSE) Project	Final	11/16/2022
SP	800-188	De-Identifying Government Data Sets (3rd Draft) SP 800-188 (Draft) De-Identifying Government Data Sets (3rd Draft) 11/15/2022 Status: Draft Download: SP 800-188 (Draft) (DOI); Local Download; Comment template	Draft	11/15/2022
NISTIR	8409	Measuring the Common Vulnerability Scoring System Base Score Equation NISTIR 8409 Measuring the Common Vulnerability Scoring System Base Score Equation 11/15/2022 Status: Final Download: NISTIR 8409 (DOI); Local Download	Final	11/15/2022
SP	800-55 Rev. 2	Performance Measurement Guide for Information Security (initial working draft) SP 800-55 Rev. 2 (Draft) Performance Measurement Guide for Information Security (initial working draft) 11/14/2022 Status: Draft Download: SP 800-55 Rev. 2 (Draft) (DOI); Local Download	Draft	11/14/2022
White Paper		[Project Description] Mitigating AI/ML Bias in Context: Establishing Practices for Testing, Evaluation, Verification, and Validation of AI Systems White Paper [Project Description] Mitigating AI/ML Bias in Context: Establishing Practices for Testing, Evaluation, Verification, and Validation of AI Systems 11/09/2022 Status: Final Download: Project Description; Project homepage	Final	11/09/2022
White Paper		[Project Description] Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps White Paper [Project Description] Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps 11/09/2022 Status: Final Download: Project Description; Project homepage	Final	11/09/2022
White Paper	NIST CSWP 27	Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN): Final Annotated Outline White Paper NIST CSWP 27 Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN): Final Annotated Outline 11/03/2022 Status: Final Download: White Paper (DOI); NIST CSWP 27; Project homepage	Final	11/03/2022
White Paper		[Project Description] Responding to and Recovering from a Cyber Attack: Cybersecurity for the Manufacturing Sector White Paper [Project Description] Responding to and Recovering from a Cyber Attack: Cybersecurity for the Manufacturing Sector 11/03/2022 Status: Final Download: Project Description; Project homepage	Final	11/03/2022
White Paper		[Project Description] Securing Water and Wastewater Utilities: Cybersecurity for the Water and Wastewater Systems Sector White Paper (Draft) [Project Description] Securing Water and Wastewater Utilities: Cybersecurity for the Water and Wastewater Systems Sector 11/02/2022 Status: Draft Download: Draft Project Description; Project homepage	Draft	11/02/2022
SP	800-140B Rev. 1	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B (2nd Public Draft) SP 800-140B Rev. 1 (Draft) CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B (2nd Public Draft) 10/17/2022 Status: Draft Download: SP 800-140B Rev. 1 (Draft) (DOI); Local Download; Comments received on initial public draft + CMVP responses	Draft	10/17/2022
NISTIR	8406	Cybersecurity Framework Profile for Liquefied Natural Gas NISTIR 8406 (Draft) Cybersecurity Framework Profile for Liquefied Natural Gas 10/17/2022 Status: Draft Download: NISTIR 8406 (Draft) (DOI); Local Download; Project homepage	Draft	10/17/2022
NISTIR	8408	Understanding Stablecoin Technology and Related Security Considerations NISTIR 8408 (Draft) Understanding Stablecoin Technology and Related Security Considerations 10/05/2022 Status: Draft Download: NISTIR 8408 (Draft) (DOI); Local Download	Draft	10/05/2022
NISTIR	8413	Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8413 Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process 9/29/2022 Status: Final Download: NISTIR 8413 (DOI); Local Download; PQC Standardization Project; NIST news article	Final	9/29/2022
SP	800-220	Fiscal Year 2021 Cybersecurity and Privacy Annual Report SP 800-220 Fiscal Year 2021 Cybersecurity and Privacy Annual Report 9/26/2022 Status: Final Download: SP 800-220 (DOI); Local Download	Final	9/26/2022
NISTIR	8431	Workshop Summary Report for “Building on the NIST Foundations: Next Steps in IoT Cybersecurity” NISTIR 8431 Workshop Summary Report for “Building on the NIST Foundations: Next Steps in IoT Cybersecurity” 9/20/2022 Status: Final Download: NISTIR 8431 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	9/20/2022
NISTIR	8425	Profile of the IoT Core Baseline for Consumer IoT Products NISTIR 8425 Profile of the IoT Core Baseline for Consumer IoT Products 9/20/2022 Status: Final Download: NISTIR 8425 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	9/20/2022
NISTIR	8286C	Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight NISTIR 8286C Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight 9/14/2022 Status: Final Download: NISTIR 8286C (DOI); Local Download; See NISTIR 8286 Supplemental Material	Final	9/14/2022
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions (3rd Draft) SP 800-90C (Draft) Recommendation for Random Bit Generator (RBG) Constructions (3rd Draft) 9/07/2022 Status: Draft Download: SP 800-90C (Draft) (DOI); Local Download	Draft	9/07/2022
NISTIR	8427	Discussion on the Full Entropy Assumption of the SP 800 90 Series NISTIR 8427 (Draft) Discussion on the Full Entropy Assumption of the SP 800 90 Series 9/07/2022 Status: Draft Download: NISTIR 8427 (Draft) (DOI); Local Download	Draft	9/07/2022
White Paper		[Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector White Paper [Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector 8/29/2022 Status: Final Download: Project Description; Project homepage	Final	8/29/2022
SP	800-108 Rev. 1	Recommendation for Key Derivation Using Pseudorandom Functions SP 800-108 Rev. 1 Recommendation for Key Derivation Using Pseudorandom Functions 8/17/2022 Status: Final Download: SP 800-108 Rev. 1 (DOI); Local Download; Comments and resolutions on Draft SP 800-108r1	Final	8/17/2022

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs