Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
IR (NISTIR)	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
CSWP	NIST Cybersecurity White Papers General white papers, thought pieces, and official cybersecurity- and privacy-related papers not published as a FIPS, SP, or IR.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins (1990-2020) Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. More of these publications from before 2008 will be added to this database.

Inclusive language. We recognize that some NIST publications contain potentially biased terminology. As we revise publications, we are reviewing and editing that language based on NIST’s inclusive language guidance. New publications in development will also follow that guidance.

See NIST Publications for additional Cybersecurity Publications.

More info:
- Download a spreadsheet (XLSX) of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins, and White Papers
- RSS/Atom and JSON feeds are available for our Draft Publications Open for Comment
- See the Crypto Publication Review Project for current reviews of numerous cryptography standards, recommendations, and guidelines.
- Learn about Digital Object Identifiers (DOI)

Recent Publications

Series	Number	Title Publications	Status	Release Date
NISTIR	8323 Rev. 1	Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services NISTIR 8323 Rev. 1 (Draft) Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services 6/29/2022 Status: Draft Download: NISTIR 8323 Rev. 1 (Draft) (DOI); Local Download; Comment template; PNT homepage	Draft	6/29/2022
SP	800-219	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 6/24/2022 Status: Final Download: SP 800-219 (DOI); Local Download; mSCP GitHub site; mSCP project documentation	Final	6/24/2022
SP	1800-34	Validating the Integrity of Computing Devices SP 1800-34 (Draft) Validating the Integrity of Computing Devices 6/23/2022 Status: Draft Download: NIST SP 1800-34 ipd; Project homepage	Draft	6/23/2022
NISTIR	8425	Profile of the IoT Core Baseline for Consumer IoT Products NISTIR 8425 (Draft) Profile of the IoT Core Baseline for Consumer IoT Products 6/17/2022 Status: Draft Download: NISTIR 8425 (Draft) (DOI); Local Download; Ideas for the Future of IoT Cybersecurity at NIST: IoT Risk Identification Complexity	Draft	6/17/2022
White Paper	NIST CSWP 26	Ordered t-way Combinations for Testing State-based Systems White Paper NIST CSWP 26 Ordered t-way Combinations for Testing State-based Systems 6/13/2022 Status: Final Download: White Paper (DOI); NIST CSWP 26	Final	6/13/2022
NISTIR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response NISTIR 8286D (Draft) Using Business Impact Analysis to Inform Risk Prioritization and Response 6/09/2022 Status: Draft Download: NISTIR 8286D (Draft) (DOI); Local Download; See NISTIR 8286 Supplemental Material	Draft	6/09/2022
NISTIR	8409	Measuring the Common Vulnerability Scoring System Base Score Equation NISTIR 8409 (Draft) Measuring the Common Vulnerability Scoring System Base Score Equation 6/08/2022 Status: Draft Download: NISTIR 8409 (Draft) (DOI); Local Download	Draft	6/08/2022
SP	800-160 Vol. 1 Rev. 1	Engineering Trustworthy Secure Systems SP 800-160 Vol. 1 Rev. 1 (Draft) Engineering Trustworthy Secure Systems 6/07/2022 Status: Draft Download: SP 800-160 Vol. 1 Rev. 1 (Draft) (DOI); Local Download; Comment template; Systems Security Engineering (SSE) Project	Draft	6/07/2022
SP	1800-35	Implementing a Zero Trust Architecture (Preliminary Draft) SP 1800-35 (Draft) Implementing a Zero Trust Architecture (Preliminary Draft) 6/03/2022 Status: Draft Download: NIST SP 1800-35A iprd; Project homepage	Draft	6/03/2022
NISTIR	8403	Blockchain for Access Control Systems NISTIR 8403 Blockchain for Access Control Systems 5/26/2022 Status: Final Download: NISTIR 8403 (DOI); Local Download	Final	5/26/2022
SP	800-140C Rev. 1	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 1 CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Final Download: SP 800-140C Rev. 1 (DOI); Local Download	Final	5/20/2022
SP	800-140D Rev. 1	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 1 CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Final Download: SP 800-140D Rev. 1 (DOI); Local Download	Final	5/20/2022
White Paper	NIST CSWP 25	A Data Structure for Integrity Protection with Erasure Capability White Paper NIST CSWP 25 A Data Structure for Integrity Protection with Erasure Capability 5/20/2022 Status: Final Download: White Paper (DOI); NIST CSWP 25	Final	5/20/2022
SP	800-140B Rev. 1	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B Rev. 1 (Draft) CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 5/12/2022 Status: Draft Download: SP 800-140B Rev. 1 (Draft) (DOI); Local Download	Draft	5/12/2022
White Paper	NIST CSWP 20	Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators White Paper NIST CSWP 20 Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators 5/06/2022 Status: Final Download: White Paper (DOI); NIST CSWP 20	Final	5/06/2022
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations 5/05/2022 Status: Final Download: SP 800-161 Rev. 1 (DOI); Local Download; EO 14028: Software Security in Supply Chains; NIST’s Cyber Supply Chain Risk Management Program; NIST news article	Final	5/05/2022
NISTIR	8320	Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases NISTIR 8320 Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases 5/04/2022 Status: Final Download: NISTIR 8320 (DOI); Local Download; Trusted Cloud projects	Final	5/04/2022
SP	800-82 Rev. 3	Guide to Operational Technology (OT) Security SP 800-82 Rev. 3 (Draft) Guide to Operational Technology (OT) Security 4/26/2022 Status: Draft Download: SP 800-82 Rev. 3 (Draft) (DOI); Local Download; Comment template	Draft	4/26/2022
SP	1800-33	5G Cybersecurity (Preliminary Draft) SP 1800-33 (Draft) 5G Cybersecurity (Preliminary Draft) 4/25/2022 Status: Draft Download: SP 1800-33B (Prelim. Draft); Project homepage; SP 1800-33A (Prelim. Draft)	Draft	4/25/2022
NISTIR	8320C	Hardware-Enabled Security: Machine Identity Management and Protection NISTIR 8320C (Draft) Hardware-Enabled Security: Machine Identity Management and Protection 4/20/2022 Status: Draft Download: NISTIR 8320C (Draft) (DOI); Local Download	Draft	4/20/2022
NISTIR	8320B	Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms NISTIR 8320B Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms 4/20/2022 Status: Final Download: NISTIR 8320B (DOI); Local Download; Trusted Cloud projects	Final	4/20/2022
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 4/20/2022 Status: Final Download: SP 1800-19 (DOI); Local Download; Project homepage	Final	4/20/2022
NISTIR	8401	Satellite Ground Segment: Applying the Cybersecurity Framework to Assure Satellite Command and Control NISTIR 8401 (Draft) Satellite Ground Segment: Applying the Cybersecurity Framework to Assure Satellite Command and Control 4/18/2022 Status: Draft Download: NISTIR 8401 (Draft) (DOI); Local Download	Draft	4/18/2022
NISTIR	8419	Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives NISTIR 8419 Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives 4/07/2022 Status: Final Download: NISTIR 8419 (DOI); Local Download	Final	4/07/2022
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 4/06/2022 Status: Final Download: SP 1800-31 (DOI); Local Download; Project homepage	Final	4/06/2022

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Current Publications

Publications

Recent Publications

Current Publications