Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
IR (NISTIR)	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
CSWP	NIST Cybersecurity White Papers General white papers, thought pieces, and official cybersecurity- and privacy-related papers not published as a FIPS, SP, or IR.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins (1990-2020) Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. More of these publications from before 2008 will be added to this database.

Inclusive language. We recognize that some NIST publications contain potentially biased terminology. As we revise publications, we are reviewing and editing that language based on NIST’s inclusive language guidance. New publications in development will also follow that guidance.

See NIST Publications for additional Cybersecurity Publications.

More info:
- Download a spreadsheet (XLSX) of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins, and White Papers
- RSS/Atom and JSON feeds are available for our Draft Publications Open for Comment
- See the Crypto Publication Review Project for current reviews of numerous cryptography standards, recommendations, and guidelines.
- Learn about Digital Object Identifiers (DOI)

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	800-140D Rev. 1	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 1 CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Final Download: SP 800-140D Rev. 1 (DOI); Local Download	Final	5/20/2022
White Paper	NIST CSWP 25	A Data Structure for Integrity Protection with Erasure Capability White Paper NIST CSWP 25 A Data Structure for Integrity Protection with Erasure Capability 5/20/2022 Status: Final Download: White Paper (DOI); NIST CSWP 25	Final	5/20/2022
SP	800-140C Rev. 1	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 1 CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Final Download: SP 800-140C Rev. 1 (DOI); Local Download	Final	5/20/2022
SP	800-140B Rev. 1	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B Rev. 1 (Draft) CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 5/12/2022 Status: Draft Download: SP 800-140B Rev. 1 (Draft) (DOI); Local Download	Draft	5/12/2022
White Paper	NIST CSWP 20	Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators White Paper NIST CSWP 20 Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators 5/06/2022 Status: Final Download: White Paper (DOI); Local Download	Final	5/06/2022
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations 5/05/2022 Status: Final Download: SP 800-161 Rev. 1 (DOI); Local Download; EO 14028: Software Security in Supply Chains; NIST’s Cyber Supply Chain Risk Management Program; NIST news article	Final	5/05/2022
NISTIR	8320	Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases NISTIR 8320 Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases 5/04/2022 Status: Final Download: NISTIR 8320 (DOI); Local Download; Trusted Cloud projects	Final	5/04/2022
SP	800-82 Rev. 3	Guide to Operational Technology (OT) Security SP 800-82 Rev. 3 (Draft) Guide to Operational Technology (OT) Security 4/26/2022 Status: Draft Download: SP 800-82 Rev. 3 (Draft) (DOI); Local Download; Comment template	Draft	4/26/2022
SP	1800-33	5G Cybersecurity (Preliminary Draft) SP 1800-33 (Draft) 5G Cybersecurity (Preliminary Draft) 4/25/2022 Status: Draft Download: SP 1800-33B (Prelim. Draft); Project homepage; SP 1800-33A (Prelim. Draft)	Draft	4/25/2022
NISTIR	8320C	Hardware-Enabled Security: Machine Identity Management and Protection NISTIR 8320C (Draft) Hardware-Enabled Security: Machine Identity Management and Protection 4/20/2022 Status: Draft Download: NISTIR 8320C (Draft) (DOI); Local Download	Draft	4/20/2022
NISTIR	8320B	Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms NISTIR 8320B Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms 4/20/2022 Status: Final Download: NISTIR 8320B (DOI); Local Download; Trusted Cloud projects	Final	4/20/2022
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 4/20/2022 Status: Final Download: SP 1800-19 (DOI); Local Download; Project homepage	Final	4/20/2022
NISTIR	8401	Satellite Ground Segment: Applying the Cybersecurity Framework to Assure Satellite Command and Control NISTIR 8401 (Draft) Satellite Ground Segment: Applying the Cybersecurity Framework to Assure Satellite Command and Control 4/18/2022 Status: Draft Download: NISTIR 8401 (Draft) (DOI); Local Download	Draft	4/18/2022
NISTIR	8419	Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives NISTIR 8419 Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives 4/07/2022 Status: Final Download: NISTIR 8419 (DOI); Local Download	Final	4/07/2022
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 4/06/2022 Status: Final Download: SP 1800-31 (DOI); Local Download; Project homepage	Final	4/06/2022
SP	800-40 Rev. 4	Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology SP 800-40 Rev. 4 Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology 4/06/2022 Status: Final Download: SP 800-40 Rev. 4 (DOI); Local Download	Final	4/06/2022
SP	1800-10	Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector SP 1800-10 Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector 3/16/2022 Status: Final Download: SP 1800-10 (DOI); Local Download; Project homepage	Final	3/16/2022
SP	800-172A	Assessing Enhanced Security Requirements for Controlled Unclassified Information SP 800-172A Assessing Enhanced Security Requirements for Controlled Unclassified Information 3/15/2022 Status: Final Download: SP 800-172A (DOI); Local Download; Assessment Procedures Spreadsheet; Assessment Procedures CSV; README for CSV	Final	3/15/2022
SP	800-204C	Implementation of DevSecOps for a Microservices-based Application with Service Mesh SP 800-204C Implementation of DevSecOps for a Microservices-based Application with Service Mesh 3/08/2022 Status: Final Download: SP 800-204C (DOI); Local Download	Final	3/08/2022
White Paper		[Project Description] Responding to and Recovering from a Cyberattack: Cybersecurity for the Manufacturing Sector White Paper (Draft) [Project Description] Responding to and Recovering from a Cyberattack: Cybersecurity for the Manufacturing Sector 2/28/2022 Status: Draft Download: Draft Project Description; Project homepage	Draft	2/28/2022
NISTIR	8270	Introduction to Cybersecurity for Commercial Satellite Operations (2nd Draft) NISTIR 8270 (Draft) Introduction to Cybersecurity for Commercial Satellite Operations (2nd Draft) 2/25/2022 Status: Draft Download: NISTIR 8270 (Draft) (DOI); Local Download	Draft	2/25/2022
White Paper		Getting Started with Cybersecurity Risk Management: Ransomware White Paper Getting Started with Cybersecurity Risk Management: Ransomware 2/24/2022 Status: Final Download: Quick Start Guide; Portuguese translation; Spanish translation	Final	2/24/2022
NISTIR	8374	Ransomware Risk Management: A Cybersecurity Framework Profile NISTIR 8374 Ransomware Risk Management: A Cybersecurity Framework Profile 2/23/2022 Status: Final Download: NISTIR 8374 (DOI); Local Download; Translations of NIST IR 8374	Final	2/23/2022
SP	1800-30	Securing Telehealth Remote Patient Monitoring Ecosystem SP 1800-30 Securing Telehealth Remote Patient Monitoring Ecosystem 2/22/2022 Status: Final Download: SP 1800-30 (DOI); Local Download; SP 1800-30 files; Project homepage	Final	2/22/2022
SP	800-219	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 (Draft) Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 2/17/2022 Status: Draft Download: SP 800-219 (Draft) (DOI); Local Download; Comment template; mSCP GitHub site; mSCP project documentation	Draft	2/17/2022

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Current Publications

Publications

Recent Publications

Current Publications