Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins, and White Papers

RSS/Atom and JSON feeds are available for our Draft Publications Open for Comment

See the Crypto Publication Review Project for current reviews of numerous cryptography standards, recommendations, and guidelines.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	1800-34	Validating the Integrity of Computing Devices (Preliminary Draft) SP 1800-34 (Draft) Validating the Integrity of Computing Devices (Preliminary Draft) 11/22/2021 Status: Draft Download: SP 1800-34C (Prelim. Draft); Project homepage; SP 1800-34B (Prelim. Draft); SP 1800-34A (Prelim. Draft)	Draft	11/22/2021
SP	800-40 Rev. 4	Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology SP 800-40 Rev. 4 (Draft) Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology 11/17/2021 Status: Draft Download: SP 800-40 Rev. 4 (Draft) (DOI); Local Download	Draft	11/17/2021
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 (Draft) Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 11/17/2021 Status: Draft Download: Draft SP 1800-31; Project homepage	Draft	11/17/2021
NISTIR	8286A	Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management NISTIR 8286A Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management 11/12/2021 Status: Final Download: NISTIR 8286A (DOI); Local Download; Risk Register Schema (JSON); Risk Detail Record Schema (JSON); Risk Detail Record Example (JSON)	Final	11/12/2021
White Paper		Baseline Criteria for Consumer Software Cybersecurity Labeling White Paper (Draft) Baseline Criteria for Consumer Software Cybersecurity Labeling 11/01/2021 Status: Draft Download: Draft Baseline Criteria; Consumer Software Criteria page; NIST news article	Draft	11/01/2021
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations (2nd Draft) SP 800-161 Rev. 1 (Draft) Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations (2nd Draft) 10/28/2021 Status: Draft Download: SP 800-161 Rev. 1 (Draft) (DOI); Local Download; Comment template; NIST’s Cyber Supply Chain Risk Management Program	Draft	10/28/2021
NISTIR	8320	Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases (2nd Draft) NISTIR 8320 (Draft) Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases (2nd Draft) 10/27/2021 Status: Draft Download: NISTIR 8320 (Draft) (DOI); Local Download	Draft	10/27/2021
NISTIR	8320B	Hardware-Enabled Security: Policy Based Governance in Trusted Container Platforms NISTIR 8320B (Draft) Hardware-Enabled Security: Policy Based Governance in Trusted Container Platforms 10/27/2021 Status: Draft Download: NISTIR 8320B (Draft) (DOI); Local Download	Draft	10/27/2021
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (Draft) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 10/27/2021 Status: Draft Download: Draft SP 1800-19; Submit comments; Project homepage	Draft	10/27/2021
SP	800-108 Rev. 1	Recommendation for Key Derivation Using Pseudorandom Functions SP 800-108 Rev. 1 (Draft) Recommendation for Key Derivation Using Pseudorandom Functions 10/18/2021 Status: Draft Download: SP 800-108 Rev. 1 (Draft) (DOI); Local Download	Draft	10/18/2021
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 (Draft) Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 9/30/2021 Status: Draft Download: SP 800-218 (Draft) (DOI); Local Download; SSDF Project homepage	Draft	9/30/2021
White Paper		Benefits of an Updated Mapping between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards White Paper Benefits of an Updated Mapping between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards 9/29/2021 Status: Final Download: White Paper (DOI); Local Download; Public Data Resource	Final	9/29/2021
SP	800-204C	Implementation of DevSecOps for a Microservices-based Application with Service Mesh SP 800-204C (Draft) Implementation of DevSecOps for a Microservices-based Application with Service Mesh 9/29/2021 Status: Draft Download: SP 800-204C (Draft) (DOI); Local Download	Draft	9/29/2021
SP	800-214	2020 Cybersecurity and Privacy Annual Report SP 800-214 2020 Cybersecurity and Privacy Annual Report 9/28/2021 Status: Final Download: SP 800-214 (DOI); Local Download	Final	9/28/2021
SP	1800-10	Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector SP 1800-10 (Draft) Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector 9/23/2021 Status: Draft Download: Draft SP 1800-10; Submit comments	Draft	9/23/2021
SP	800-50 Rev. 1	PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program SP 800-50 Rev. 1 (Draft) PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program 9/21/2021 Status: Draft Download: None available	Draft	9/21/2021
SP	1800-32	Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources SP 1800-32 (Draft) Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 9/21/2021 Status: Draft Download: Draft SP 1800-32 files; Submit Comments	Draft	9/21/2021
NISTIR	8360	Machine Learning for Access Control Policy Verification NISTIR 8360 Machine Learning for Access Control Policy Verification 9/16/2021 Status: Final Download: NISTIR 8360 (DOI); Local Download	Final	9/16/2021
White Paper	NIST Technical Note (TN) 2060	BGP Secure Routing Extension (BGP-SRx): Reference Implementation and Test Tools for Emerging BGP Security Standards White Paper NIST Technical Note (TN) 2060 BGP Secure Routing Extension (BGP-SRx): Reference Implementation and Test Tools for Emerging BGP Security Standards 9/15/2021 Status: Final Download: White Paper (DOI); Local Download; BGP-SRx Prototype; Public Data Resource	Final	9/15/2021
NISTIR	8379	Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance NISTIR 8379 Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance 9/09/2021 Status: Final Download: NISTIR 8379 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	9/09/2021
NISTIR	8374	Cybersecurity Framework Profile for Ransomware Risk Management NISTIR 8374 (Draft) Cybersecurity Framework Profile for Ransomware Risk Management 9/08/2021 Status: Draft Download: NISTIR 8374 (Draft) (DOI); Local Download	Draft	9/08/2021
NISTIR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management NISTIR 8286B (Draft) Prioritizing Cybersecurity Risk for Enterprise Risk Management 9/01/2021 Status: Draft Download: NISTIR 8286B (Draft) (DOI); Local Download; See NISTIR 8286 Supplemental Material	Draft	9/01/2021
White Paper		[Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector White Paper (Draft) [Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector 8/31/2021 Status: Draft Download: Draft Project Description; Submit comments; Project homepage	Draft	8/31/2021
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders SP 1800-13 Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders 8/25/2021 Status: Final Download: SP 1800-13 (DOI); Local Download; SP 1800-13 volumes and project homepage	Final	8/25/2021
NISTIR	8259B	IoT Non-Technical Supporting Capability Core Baseline NISTIR 8259B IoT Non-Technical Supporting Capability Core Baseline 8/25/2021 Status: Final Download: NISTIR 8259B (DOI); Local Download; IoT Device Cybersecurity Requirement Catalogs	Final	8/25/2021

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Current Publications

Publications

Recent Publications

Current Publications