Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	800-55 Rev. 2	PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security SP 800-55 Rev. 2 (Draft) PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security 9/24/2020 Status: Draft Download: None available	Draft	9/24/2020
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations 9/23/2020 Status: Final Download: SP 800-53 Rev. 5 (DOI); Local Download; SP 800-53 Collaboration Index Template; SP 800-53 Collaboration Index Template; Blog post: "The Next Generation Security and Privacy Controls—Protecting the Nation’s Critical Assets"	Final	9/23/2020
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 Data Integrity: Recovering from Ransomware and Other Destructive Events 9/22/2020 Status: Final Download: SP 1800-11 (DOI); Local Download; SP 1800-11 volumes and Project Homepage	Final	9/22/2020
SP	1800-15	Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 (Draft) Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 9/16/2020 Status: Draft Download: Draft SP 1800-15 (34 MB); Submit Comments on SP 1800-15; Project Homepage	Draft	9/16/2020
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 9/15/2020 Status: Final Download: SP 1800-21 (DOI); Local Download; SP 1800-21 volumes and Project Homepage	Final	9/15/2020
SP	1800-27	Securing Property Management Systems SP 1800-27 (Draft) Securing Property Management Systems 9/14/2020 Status: Draft Download: Draft SP 1800-27 volumes and Project Homepage; Submit Comments	Draft	9/14/2020
SP	800-46 Rev. 3	PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security SP 800-46 Rev. 3 (Draft) PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security 9/10/2020 Status: Draft Download: None available	Draft	9/10/2020
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways (Preliminary Draft) SP 1800-31 (Draft) Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways (Preliminary Draft) 9/10/2020 Status: Draft Download: Prelim. Draft SP 1800-31A; Submit Comments; Project homepage	Draft	9/10/2020
White Paper		Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management White Paper (Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management 9/08/2020 Status: Draft Download: White Paper (DOI); Local Download	Draft	9/08/2020
Journal Article		Parallel Device-Independent Quantum Key Distribution Journal Article Parallel Device-Independent Quantum Key Distribution 9/01/2020 Status: Final Download: Journal Article (DOI); Preprint	Final	9/01/2020
White Paper		Annotated Outline: Cybersecurity Profile for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services White Paper (Draft) Annotated Outline: Cybersecurity Profile for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services 8/31/2020 Status: Draft Download: Draft Annotated Outline; Responsible Use of PNT Services homepage; Webinar details (9/15/20 - 9/16/20)	Draft	8/31/2020
NISTIR	8006	NIST Cloud Computing Forensic Science Challenges NISTIR 8006 NIST Cloud Computing Forensic Science Challenges 8/25/2020 Status: Final Download: NISTIR 8006 (DOI); Local Download	Final	8/25/2020
NISTIR	8272	Impact Analysis Tool for Interdependent Cyber Supply Chain Risks NISTIR 8272 Impact Analysis Tool for Interdependent Cyber Supply Chain Risks 8/25/2020 Status: Final Download: NISTIR 8272 (DOI); Local Download; CSRC - Source Code, Sample Data, and Installer Packages; GitHub - Source Code, Sample Data, and Installer Packages	Final	8/25/2020
SP	800-211	2019 NIST/ITL Cybersecurity Program Annual Report SP 800-211 2019 NIST/ITL Cybersecurity Program Annual Report 8/24/2020 Status: Final Download: SP 800-211 (DOI); Local Download	Final	8/24/2020
SP	1500-16	Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report SP 1500-16 Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report 8/20/2020 Status: Final Download: SP 1500-16 (DOI); Local Download	Final	8/20/2020
SP	800-56C Rev. 2	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 2 Recommendation for Key-Derivation Methods in Key-Establishment Schemes 8/18/2020 Status: Final Download: SP 800-56C Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56C Rev. 2	Final	8/18/2020
SP	800-207	Zero Trust Architecture SP 800-207 Zero Trust Architecture 8/11/2020 Status: Final Download: SP 800-207 (DOI); Local Download; ZTA project at NCCoE	Final	8/11/2020
NISTIR	8278A	National Cybersecurity Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers NISTIR 8278A (Draft) National Cybersecurity Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers 8/04/2020 Status: Draft Download: NISTIR 8278A (Draft) (DOI); Local Download; Informative references homepage; Focal Document Templates; Focal Documents Schema; OLIR Catalog	Draft	8/04/2020
NISTIR	8278	National Cybersecurity Online Informative References (OLIR) Program: Program Overview and OLIR Uses (2nd Draft) NISTIR 8278 (Draft) National Cybersecurity Online Informative References (OLIR) Program: Program Overview and OLIR Uses (2nd Draft) 8/04/2020 Status: Draft Download: NISTIR 8278 (Draft) (DOI); Local Download; Informative References homepage; Focal Document Templates; Focal Documents Schema; OLIR Catalog	Draft	8/04/2020
ITL Bulletin		Security Considerations for Exchanging Files Over the Internet ITL Bulletin Security Considerations for Exchanging Files Over the Internet 8/03/2020 Status: Final Download: August 2020 ITL Bulletin; Infographic: Play the Secure File Exchange Game	Final	8/03/2020
SP	800-53B	Control Baselines for Information Systems and Organizations SP 800-53B (Draft) Control Baselines for Information Systems and Organizations 7/31/2020 Status: Draft Download: SP 800-53B (Draft) (DOI); Local Download; Comment template	Draft	7/31/2020
SP	800-210	General Access Control Guidance for Cloud Systems SP 800-210 General Access Control Guidance for Cloud Systems 7/31/2020 Status: Final Download: SP 800-210 (DOI); Local Download	Final	7/31/2020
White Paper	NIST Technical Note (TN) 2066	OpenFMB Proof of Concept Implementation Research White Paper NIST Technical Note (TN) 2066 OpenFMB Proof of Concept Implementation Research 7/29/2020 Status: Final Download: White Paper (DOI); NIST TN 2066	Final	7/29/2020
NISTIR	8309	Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8309 Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process 7/22/2020 Status: Final Download: NISTIR 8309 (DOI); Local Download; PQC Standardization Project; NIST news article	Final	7/22/2020
SP	800-209	Security Guidelines for Storage Infrastructure SP 800-209 (Draft) Security Guidelines for Storage Infrastructure 7/21/2020 Status: Draft Download: SP 800-209 (Draft) (DOI); Local Download	Draft	7/21/2020

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Current Publications

Publications

Recent Publications

Current Publications