Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
White Paper		Methodology for Characterizing Network Behavior of Internet of Things Devices White Paper (Draft) Methodology for Characterizing Network Behavior of Internet of Things Devices 4/01/2020 Status: Draft Download: White Paper (DOI); Local Download; Submit Comments; Project homepage	Draft	4/01/2020
SP	800-210	General Access Control Guidance for Cloud Systems SP 800-210 (Draft) General Access Control Guidance for Cloud Systems 4/01/2020 Status: Draft Download: SP 800-210 (Draft) (DOI); Local Download	Draft	4/01/2020
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 3/31/2020 Status: Final Download: SP 800-175B Rev. 1 (DOI); Local Download	Final	3/31/2020
White Paper		[Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise White Paper [Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise 3/30/2020 Status: Final Download: Project Description; Project homepage	Final	3/30/2020
SP	800-56C Rev. 2	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 2 (Draft) Recommendation for Key-Derivation Methods in Key-Establishment Schemes 3/24/2020 Status: Draft Download: SP 800-56C Rev. 2 (Draft) (DOI); Local Download	Draft	3/24/2020
SP	800-124 Rev. 2	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 2 (Draft) Guidelines for Managing the Security of Mobile Devices in the Enterprise 3/24/2020 Status: Draft Download: SP 800-124 Rev. 2 (Draft) (DOI); Local Download	Draft	3/24/2020
SP	800-140	FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140 FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140 (DOI); Local Download	Final	3/20/2020
SP	800-140A	CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140A CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140A (DOI); Local Download	Final	3/20/2020
SP	800-140C	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140C (DOI); Local Download	Final	3/20/2020
SP	800-140B	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 3/20/2020 Status: Final Download: SP 800-140B (DOI); Local Download	Final	3/20/2020
SP	800-140E	CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 SP 800-140E CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 3/20/2020 Status: Final Download: SP 800-140E (DOI); Local Download	Final	3/20/2020
SP	800-140F	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140F (DOI); Local Download	Final	3/20/2020
SP	800-140D	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140D (DOI); Local Download	Final	3/20/2020
NISTIR	8286	Integrating Cybersecurity and Enterprise Risk Management (ERM) NISTIR 8286 (Draft) Integrating Cybersecurity and Enterprise Risk Management (ERM) 3/19/2020 Status: Draft Download: NISTIR 8286 (Draft) (DOI); Local Download	Draft	3/19/2020
NISTIR	8170	Approaches for Federal Agencies to Use the Cybersecurity Framework NISTIR 8170 Approaches for Federal Agencies to Use the Cybersecurity Framework 3/19/2020 Status: Final Download: NISTIR 8170 (DOI); Local Download; Cybersecurity Framework homepage	Final	3/19/2020
ITL Bulletin		Security for Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Solutions ITL Bulletin Security for Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Solutions 3/18/2020 Status: Final Download: March 2020 ITL Bulletin	Final	3/18/2020
White Paper		[Project Description] Implementing a Zero Trust Architecture White Paper (Draft) [Project Description] Implementing a Zero Trust Architecture 3/17/2020 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	3/17/2020
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations (Final Public Draft) SP 800-53 Rev. 5 (Draft) Security and Privacy Controls for Information Systems and Organizations (Final Public Draft) 3/16/2020 Status: Draft Download: SP 800-53 Rev. 5 (Draft) (DOI); Local Download; Comment template; Summary: Significant Changes from Rev. 4; OSCAL version of 800-53 FPD controls; Spreadsheet version of 800-53 FPD controls	Draft	3/16/2020
SP	800-206	Annual Report 2018: NIST/ITL Cybersecurity Program SP 800-206 Annual Report 2018: NIST/ITL Cybersecurity Program 3/13/2020 Status: Final Download: SP 800-206 (DOI); Local Download	Final	3/13/2020
NISTIR	8272	Impact Analysis Tool for Interdependent Cyber Supply Chain Risks NISTIR 8272 (Draft) Impact Analysis Tool for Interdependent Cyber Supply Chain Risks 3/13/2020 Status: Draft Download: NISTIR 8272 (Draft) (DOI); Local Download; CSRC - Source Code, Sample Data, and Installer Packages; GitHub - Source Code, Sample Data, and Installer Packages	Draft	3/13/2020
SP	800-133 Rev. 2	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 2 (Draft) Recommendation for Cryptographic Key Generation 3/05/2020 Status: Draft Download: SP 800-133 Rev. 2 (Draft) (DOI); Local Download	Draft	3/05/2020
NISTIR	8183 Rev. 1	Cybersecurity Framework Version 1.1 Manufacturing Profile NISTIR 8183 Rev. 1 (Draft) Cybersecurity Framework Version 1.1 Manufacturing Profile 3/04/2020 Status: Draft Download: NISTIR 8183 Rev. 1 (Draft) (DOI); Local Download; Comment template; NIST Cybersecurity Framework	Draft	3/04/2020
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 Digital Identity Guidelines 3/02/2020 Status: Final Download: SP 800-63-3 (DOI); Local Download; FAQ; SP 800-63 (GitHub)	Final	3/02/2020
SP	800-63A	Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A Digital Identity Guidelines: Enrollment and Identity Proofing 3/02/2020 Status: Final Download: SP 800-63A (DOI); Local Download	Final	3/02/2020
SP	800-63B	Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management 3/02/2020 Status: Final Download: SP 800-63B (DOI); Local Download	Final	3/02/2020

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Public Drafts
- View By Series
Other Pubs

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Current Publications

Publications

Recent Publications

Current Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Current Publications

Publications

Recent Publications

Current Publications

Computer Security
Resource Center