Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
IR (NISTIR)	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
CSWP	NIST Cybersecurity White Papers General white papers, thought pieces, and official cybersecurity- and privacy-related papers not published as a FIPS, SP, or IR.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins (1990-2020) Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. More of these publications from before 2008 will be added to this database.

Inclusive language. We recognize that some NIST publications contain potentially biased terminology. As we revise publications, we are reviewing and editing that language based on NIST’s inclusive language guidance. New publications in development will also follow that guidance.

See NIST Publications for additional Cybersecurity Publications.

More info:
- Download a spreadsheet (XLSX) of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins, and White Papers
- RSS/Atom and JSON feeds are available for our Draft Publications Open for Comment
- See the Crypto Publication Review Project for current reviews of numerous cryptography standards, recommendations, and guidelines.
- Learn about Digital Object Identifiers (DOI)

Recent Publications

Series	Number	Title Publications	Status	Release Date
NISTIR	8413	Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8413 Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process 9/29/2022 Status: Final Download: NISTIR 8413 (DOI); Local Download; PQC Standardization Project; NIST news article	Final	9/29/2022
SP	800-220	Fiscal Year 2021 Cybersecurity and Privacy Annual Report SP 800-220 Fiscal Year 2021 Cybersecurity and Privacy Annual Report 9/26/2022 Status: Final Download: SP 800-220 (DOI); Local Download	Final	9/26/2022
NISTIR	8431	Workshop Summary Report for “Building on the NIST Foundations: Next Steps in IoT Cybersecurity” NISTIR 8431 Workshop Summary Report for “Building on the NIST Foundations: Next Steps in IoT Cybersecurity” 9/20/2022 Status: Final Download: NISTIR 8431 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	9/20/2022
NISTIR	8425	Profile of the IoT Core Baseline for Consumer IoT Products NISTIR 8425 Profile of the IoT Core Baseline for Consumer IoT Products 9/20/2022 Status: Final Download: NISTIR 8425 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	9/20/2022
NISTIR	8286C	Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight NISTIR 8286C Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight 9/14/2022 Status: Final Download: NISTIR 8286C (DOI); Local Download; See NISTIR 8286 Supplemental Material	Final	9/14/2022
NISTIR	8427	Discussion on the Full Entropy Assumption of the SP 800 90 Series NISTIR 8427 (Draft) Discussion on the Full Entropy Assumption of the SP 800 90 Series 9/07/2022 Status: Draft Download: NISTIR 8427 (Draft) (DOI); Local Download	Draft	9/07/2022
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions (3rd Draft) SP 800-90C (Draft) Recommendation for Random Bit Generator (RBG) Constructions (3rd Draft) 9/07/2022 Status: Draft Download: SP 800-90C (Draft) (DOI); Local Download	Draft	9/07/2022
White Paper		[Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector White Paper [Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector 8/29/2022 Status: Final Download: Project Description; Project homepage	Final	8/29/2022
White Paper		[Project Description] Mitigating AI/ML Bias in Context: Establishing Practices for Testing, Evaluation, Verification, and Validation of AI Systems White Paper (Draft) [Project Description] Mitigating AI/ML Bias in Context: Establishing Practices for Testing, Evaluation, Verification, and Validation of AI Systems 8/18/2022 Status: Draft Download: Draft Project Description; Project homepage	Draft	8/18/2022
SP	800-108 Rev. 1	Recommendation for Key Derivation Using Pseudorandom Functions SP 800-108 Rev. 1 Recommendation for Key Derivation Using Pseudorandom Functions 8/17/2022 Status: Final Download: SP 800-108 Rev. 1 (DOI); Local Download; Comments and resolutions on Draft SP 800-108r1	Final	8/17/2022
NISTIR	8214B	Notes on Threshold EdDSA/Schnorr Signatures NISTIR 8214B (Draft) Notes on Threshold EdDSA/Schnorr Signatures 8/12/2022 Status: Draft Download: NISTIR 8214B (Draft) (DOI); Local Download	Draft	8/12/2022
SP	1800-35	Implementing a Zero Trust Architecture (Preliminary Draft) SP 1800-35 (Draft) Implementing a Zero Trust Architecture (Preliminary Draft) 8/09/2022 Status: Draft Download: NIST SP 1800-35 preliminary draft files; NIST SP 1800-35D iprd; NIST SP 1800-35C iprd; NIST SP 1800-35B iprd; NIST SP 1800-35A iprd; Project homepage	Draft	8/09/2022
SP	800-215	Guide to a Secure Enterprise Network Landscape SP 800-215 (Draft) Guide to a Secure Enterprise Network Landscape 8/05/2022 Status: Draft Download: SP 800-215 (Draft) (DOI); Local Download	Draft	8/05/2022
White Paper		[Project Description] Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps White Paper (Draft) [Project Description] Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps 7/21/2022 Status: Draft Download: Draft Project Description; Project homepage	Draft	7/21/2022
SP	800-66 Rev. 2	Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide SP 800-66 Rev. 2 (Draft) Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide 7/21/2022 Status: Draft Download: SP 800-66 Rev. 2 (Draft) (DOI); Local Download; NIST news article	Draft	7/21/2022
SP	800-221	Enterprise Impacts of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio SP 800-221 (Draft) Enterprise Impacts of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio 7/20/2022 Status: Draft Download: SP 800-221 (Draft) (DOI); Local Download	Draft	7/20/2022
SP	800-221A	Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio SP 800-221A (Draft) Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio 7/20/2022 Status: Draft Download: SP 800-221A (Draft) (DOI); Local Download; Browse and download SP 800-221A content	Draft	7/20/2022
NISTIR	8235	Security Guidance for First Responder Mobile and Wearable Devices NISTIR 8235 Security Guidance for First Responder Mobile and Wearable Devices 7/20/2022 Status: Final Download: NISTIR 8235 (DOI); Local Download	Final	7/20/2022
SP	800-171 Rev. 3	Pre-Draft Call for Comments: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 3 (Draft) Pre-Draft Call for Comments: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 7/19/2022 Status: Draft Download: Protecting CUI project	Draft	7/19/2022
White Paper	NIST CSWP 27 ipd	Cybersecurity Profile for the Hybrid Satellite Networks (HSN) Cybersecurity: Draft Annotated Outline White Paper NIST CSWP 27 ipd (Draft) Cybersecurity Profile for the Hybrid Satellite Networks (HSN) Cybersecurity: Draft Annotated Outline 7/12/2022 Status: Draft Download: White Paper (DOI); NIST CSWP 27 ipd; Project homepage	Draft	7/12/2022
NISTIR	8323 Rev. 1	Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services NISTIR 8323 Rev. 1 (Draft) Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services 6/29/2022 Status: Draft Download: NISTIR 8323 Rev. 1 (Draft) (DOI); Local Download; Comment template; PNT homepage	Draft	6/29/2022
SP	800-219	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 6/24/2022 Status: Final Download: SP 800-219 (DOI); Local Download; mSCP GitHub site; mSCP project documentation	Final	6/24/2022
SP	1800-34	Validating the Integrity of Computing Devices SP 1800-34 (Draft) Validating the Integrity of Computing Devices 6/23/2022 Status: Draft Download: NIST SP 1800-34 ipd; Project homepage	Draft	6/23/2022
White Paper	NIST CSWP 26	Ordered t-way Combinations for Testing State-based Systems White Paper NIST CSWP 26 Ordered t-way Combinations for Testing State-based Systems 6/13/2022 Status: Final Download: White Paper (DOI); NIST CSWP 26	Final	6/13/2022
NISTIR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response NISTIR 8286D (Draft) Using Business Impact Analysis to Inform Risk Prioritization and Response 6/09/2022 Status: Draft Download: NISTIR 8286D (Draft) (DOI); Local Download; See NISTIR 8286 Supplemental Material	Draft	6/09/2022

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs