Publications

The NIST Cybersecurity and Privacy Program develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This catalog includes the following NIST technical publication series:

FIPS	Federal Information Processing Standards Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (only pubs on cybersecurity and privacy)
IR	NIST Interagency or Internal Reports (NIST IR) Reports of research findings, including background information for FIPS and SPs. The subset IRs listed here are related to the NIST Cybersecurity and Privacy Program.
CSWP	NIST Cybersecurity White Papers General white papers, thought pieces, and official cybersecurity- and privacy-related papers not published as a FIPS, SP, or IR.
Project Descriptions	Project Descriptions from the National Cybersecurity Center of Excellence (NCCoE).
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins (1990-2020) Monthly overviews of NIST's security and privacy publications, programs and projects.
Other publications in this catalog are from the following NIST technical series:
AI	Artificial Intelligence: AI series reports that are focused on cybersecurity and privacy. Also see the NIST Trustworty & Responsible AI Resource Center.
GCR	Grant/Contract Reports: Work perfromed solely by an external person/organization under a grant or contract with NIST.
TN	Technical Notes: Studies or reports that are very restrictive in their treatment of a subject.

Find more of our research in: Journal Articles, Conference Papers, Books, and Other miscellaneous papers. More of these publications from before 2008 will be added to this database.

More info:
- Download a spreadsheet (XLSX) of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins, and CSWPs.
- RSS/Atom and JSON feeds for Draft Publications Open for Comment.
- Learn about Digital Object Identifiers (DOI).
- See the Crypto Publication Review Project for current reviews of numerous cryptography standards, recommendations, and guidelines.

Inclusive language. We recognize that some NIST publications contain potentially biased terminology. As we revise publications, we are reviewing and editing that language based on NIST’s inclusive language guidance. New publications in development will also follow that guidance.

Series	Number	Title Publications	Status	Release Date
IR	8441	Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN) IR 8441 (Final) Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN) 9/25/2023 Status: Final	Final	9/25/2023
SP	800-188	De-Identifying Government Datasets: Techniques and Governance SP 800-188 (Final) De-Identifying Government Datasets: Techniques and Governance 9/14/2023 Status: Final	Final	9/14/2023
SP	800-207A	A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Cloud Environments SP 800-207A (Final) A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Cloud Environments 9/13/2023 Status: Final	Final	9/13/2023
SP	1800-35	Implementing a Zero Trust Architecture (Volume E, Risk and Compliance Management) SP 1800-35 (2nd Preliminary Draft) Implementing a Zero Trust Architecture (Volume E, Risk and Compliance Management) 9/12/2023 Status: Draft	Draft	9/12/2023
IR	8450	Overview and Considerations of Access Control Based on Attribute Encryption IR 8450 (Final) Overview and Considerations of Access Control Based on Attribute Encryption 9/06/2023 Status: Final	Final	9/06/2023
IR	8408	Understanding Stablecoin Technology and Related Security Considerations IR 8408 (Final) Understanding Stablecoin Technology and Related Security Considerations 9/05/2023 Status: Final	Final	9/05/2023
IR	8481	Cybersecurity for Research: Findings and Possible Paths Forward IR 8481 (Initial Public Draft) Cybersecurity for Research: Findings and Possible Paths Forward 8/31/2023 Status: Draft	Draft	8/31/2023
IR	8472	Non-Fungible Token Security IR 8472 (Initial Public Draft) Non-Fungible Token Security 8/31/2023 Status: Draft	Draft	8/31/2023
SP	800-204D	Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD pipelines SP 800-204D (Initial Public Draft) Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD pipelines 8/30/2023 Status: Draft	Draft	8/30/2023
SP	800-50 Rev. 1	Building a Cybersecurity and Privacy Learning Program SP 800-50 Rev. 1 (Initial Public Draft) Building a Cybersecurity and Privacy Learning Program 8/28/2023 Status: Draft	Draft	8/28/2023
FIPS	203	Module-Lattice-Based Key-Encapsulation Mechanism Standard FIPS 203 (Initial Public Draft) Module-Lattice-Based Key-Encapsulation Mechanism Standard 8/24/2023 Status: Draft	Draft	8/24/2023
FIPS	205	Stateless Hash-Based Digital Signature Standard FIPS 205 (Initial Public Draft) Stateless Hash-Based Digital Signature Standard 8/24/2023 Status: Draft	Draft	8/24/2023
FIPS	204	Module-Lattice-Based Digital Signature Standard FIPS 204 (Initial Public Draft) Module-Lattice-Based Digital Signature Standard 8/24/2023 Status: Draft	Draft	8/24/2023
SP	1800-35	Implementing a Zero Trust Architecture SP 1800-35 (3rd Preliminary Draft) Implementing a Zero Trust Architecture 8/22/2023 Status: Draft	Draft	8/22/2023
IR	8477	Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings IR 8477 (Initial Public Draft) Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings 8/17/2023 Status: Draft	Draft	8/17/2023
Project Description		Manufacturing Supply Chain Traceability with Blockchain Related Technology: Reference Implementation Project Description (Final) Manufacturing Supply Chain Traceability with Blockchain Related Technology: Reference Implementation 8/14/2023 Status: Final	Final	8/14/2023
CSWP	29	The NIST Cybersecurity Framework 2.0 CSWP 29 (Initial Public Draft) The NIST Cybersecurity Framework 2.0 8/08/2023 Status: Draft	Draft	8/08/2023
Other		Discussion Draft of the NIST Cybersecurity Framework 2.0 Core with Implementation Examples Other (Initial Public Draft) Discussion Draft of the NIST Cybersecurity Framework 2.0 Core with Implementation Examples 8/08/2023 Status: Draft	Draft	8/08/2023
IR	8270	Introduction to Cybersecurity for Commercial Satellite Operations IR 8270 (Final) Introduction to Cybersecurity for Commercial Satellite Operations 7/25/2023 Status: Final	Final	7/25/2023
SP	800-140C Rev. 2	Cryptographic Module Validation Program (CMVP)-Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 2 (Final) Cryptographic Module Validation Program (CMVP)-Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 7/25/2023 Status: Final	Final	7/25/2023
SP	800-140D Rev. 2	Cryptographic Module Validation Program (CMVP)-Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 2 (Final) Cryptographic Module Validation Program (CMVP)-Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 7/25/2023 Status: Final	Final	7/25/2023
SP	800-219 Rev. 1	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 Rev. 1 (Final) Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 7/20/2023 Status: Final	Final	7/20/2023
SP	1800-35	Implementing a Zero Trust Architecture SP 1800-35 (2nd Preliminary Draft) Implementing a Zero Trust Architecture 7/19/2023 Status: Draft (Obsolete)	Draft (Obsolete)	7/19/2023
IR	8473	Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure IR 8473 (Initial Public Draft) Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure 7/14/2023 Status: Draft	Draft	7/14/2023
IR	8355	NICE Framework Competency Areas: Preparing a Job-Ready Cybersecurity Workforce IR 8355 (Final) NICE Framework Competency Areas: Preparing a Job-Ready Cybersecurity Workforce 6/21/2023 Status: Final	Final	6/21/2023

Current Publications

Publications

Recent Publications

Current Publications