Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	800-207	Zero Trust Architecture (2nd Draft) SP 800-207 (Draft) Zero Trust Architecture (2nd Draft) 2/13/2020 Status: Draft Download: SP 800-207 (Draft) (DOI); Local Download; Comment template	Draft	2/13/2020
NISTIR	8246	National Vulnerability Database (NVD) Metadata Submission Guidelines for Common Vulnerabilities and Exposures (CVE) Numbering Authorities (CNAs) and Authorized Data Publishers NISTIR 8246 (Draft) National Vulnerability Database (NVD) Metadata Submission Guidelines for Common Vulnerabilities and Exposures (CVE) Numbering Authorities (CNAs) and Authorized Data Publishers 2/10/2020 Status: Draft Download: NISTIR 8246 (Draft) (DOI); Local Download; Current Version of Table 3	Draft	2/10/2020
White Paper		[Project Description] Protecting Information and System Integrity in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector White Paper [Project Description] Protecting Information and System Integrity in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector 2/07/2020 Status: Final Download: Project Description; Project homepage	Final	2/07/2020
NISTIR	8276	Key Practices in Cyber Supply Chain Risk Management: Observations from Industry NISTIR 8276 (Draft) Key Practices in Cyber Supply Chain Risk Management: Observations from Industry 2/04/2020 Status: Draft Download: NISTIR 8276 (Draft) (DOI); Local Download; Cyber SCRM Key Practices and Case Studies; NIST news article	Draft	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company White Paper Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company White Paper Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Seagate Technology White Paper Case Studies in Cyber Supply Chain Risk Management: Seagate Technology 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
SP	800-161 Rev. 1	PRE-DRAFT Call for Comments: Supply Chain Risk Management Practices for Federal Information Systems and Organizations SP 800-161 Rev. 1 (Draft) PRE-DRAFT Call for Comments: Supply Chain Risk Management Practices for Federal Information Systems and Organizations 2/04/2020 Status: Draft Download: None available	Draft	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. White Paper Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic White Paper Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company White Paper Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations White Paper Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations 2/04/2020 Status: Final Download: White Paper (DOI); Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
SP	1800-25	Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events SP 1800-25 (Draft) Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 1/27/2020 Status: Draft Download: Draft SP 1800-25 volumes and Project Homepage	Draft	1/27/2020
SP	1800-26	Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events SP 1800-26 (Draft) Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 1/27/2020 Status: Draft Download: Draft SP 1800-26 volumes and Project Homepage	Draft	1/27/2020
NISTIR	8278	National Cybersecurity Online Informative References (OLIR) Program: Guidelines for OLIR Users and Developers NISTIR 8278 (Draft) National Cybersecurity Online Informative References (OLIR) Program: Guidelines for OLIR Users and Developers 1/24/2020 Status: Draft Download: NISTIR 8278 (Draft) (DOI); Local Download; Informative References homepage	Draft	1/24/2020
SP	800-204A	Building Secure Microservices-based Applications Using Service-Mesh Architecture SP 800-204A (Draft) Building Secure Microservices-based Applications Using Service-Mesh Architecture 1/17/2020 Status: Draft Download: SP 800-204A (Draft) (DOI); Local Download	Draft	1/17/2020
White Paper		A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems White Paper A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems 1/14/2020 Status: Final Download: White Paper (DOI); Local Download	Final	1/14/2020
SP	800-137A	Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment SP 800-137A (Draft) Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 1/13/2020 Status: Draft Download: SP 800-137A (Draft) (DOI); Local Download; Element Catalog for Draft SP 800-137A; Comment template	Draft	1/13/2020
NISTIR	8259	Recommendations for IoT Device Manufacturers: Foundational Activities and Core Device Cybersecurity Capability Baseline (2nd Draft) NISTIR 8259 (Draft) Recommendations for IoT Device Manufacturers: Foundational Activities and Core Device Cybersecurity Capability Baseline (2nd Draft) 1/07/2020 Status: Draft Download: NISTIR 8259 (Draft) (DOI); Local Download	Draft	1/07/2020
SP	800-189	Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation SP 800-189 Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation 12/17/2019 Status: Final Download: SP 800-189 (DOI); Local Download	Final	12/17/2019
SP	800-208	Recommendation for Stateful Hash-Based Signature Schemes SP 800-208 (Draft) Recommendation for Stateful Hash-Based Signature Schemes 12/11/2019 Status: Draft Download: SP 800-208 (Draft) (DOI); Local Download	Draft	12/11/2019
White Paper		[Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches White Paper [Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 12/05/2019 Status: Final Download: Project Description; Project homepage	Final	12/05/2019
White Paper		[Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches White Paper [Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches 12/05/2019 Status: Final Download: Project Description; Project homepage	Final	12/05/2019
SP	800-160 Vol. 2	Developing Cyber Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 Developing Cyber Resilient Systems: A Systems Security Engineering Approach 11/27/2019 Status: Final Download: SP 800-160 Vol. 2 (DOI); Local Download	Final	11/27/2019
Conference Proceedings		Augmenting Fiat Currency with an Integrated Managed Cryptocurrency Conference Proceedings Augmenting Fiat Currency with an Integrated Managed Cryptocurrency 11/24/2019 Status: Final Download: Paper	Final	11/24/2019

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Public Drafts
- View By Series
Other Pubs

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Current Publications

Publications

Recent Publications

Current Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Current Publications

Publications

Recent Publications

Current Publications

Computer Security
Resource Center