Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
IR (NISTIR)	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
CSWP	NIST Cybersecurity White Papers General white papers, thought pieces, and official cybersecurity- and privacy-related papers not published as a FIPS, SP, or IR.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins (1990-2020) Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. More of these publications from before 2008 will be added to this database.

Inclusive language. We recognize that some NIST publications contain potentially biased terminology. As we revise publications, we are reviewing and editing that language based on NIST’s inclusive language guidance. New publications in development will also follow that guidance.

See NIST Publications for additional Cybersecurity Publications.

More info:
- Download a spreadsheet (XLSX) of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins, and White Papers
- RSS/Atom and JSON feeds are available for our Draft Publications Open for Comment
- See the Crypto Publication Review Project for current reviews of numerous cryptography standards, recommendations, and guidelines.
- Learn about Digital Object Identifiers (DOI)

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	1800-35	Implementing a Zero Trust Architecture (Preliminary Draft) SP 1800-35 (Draft) Implementing a Zero Trust Architecture (Preliminary Draft) 8/09/2022 Status: Draft Download: NIST SP 1800-35 preliminary draft files; NIST SP 1800-35D iprd; NIST SP 1800-35C iprd; NIST SP 1800-35B iprd; NIST SP 1800-35A iprd; Project homepage	Draft	8/09/2022
SP	800-215	Guide to a Secure Enterprise Network Landscape SP 800-215 (Draft) Guide to a Secure Enterprise Network Landscape 8/05/2022 Status: Draft Download: SP 800-215 (Draft) (DOI); Local Download	Draft	8/05/2022
White Paper		[Project Description] Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps White Paper (Draft) [Project Description] Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps 7/21/2022 Status: Draft Download: Draft Project Description; Project homepage	Draft	7/21/2022
SP	800-66 Rev. 2	Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide SP 800-66 Rev. 2 (Draft) Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide 7/21/2022 Status: Draft Download: SP 800-66 Rev. 2 (Draft) (DOI); Local Download; NIST news article	Draft	7/21/2022
SP	800-221	Enterprise Impacts of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio SP 800-221 (Draft) Enterprise Impacts of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio 7/20/2022 Status: Draft Download: SP 800-221 (Draft) (DOI); Local Download	Draft	7/20/2022
SP	800-221A	Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio SP 800-221A (Draft) Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio 7/20/2022 Status: Draft Download: SP 800-221A (Draft) (DOI); Local Download; Browse and download SP 800-221A content	Draft	7/20/2022
NISTIR	8235	Security Guidance for First Responder Mobile and Wearable Devices NISTIR 8235 Security Guidance for First Responder Mobile and Wearable Devices 7/20/2022 Status: Final Download: NISTIR 8235 (DOI); Local Download	Final	7/20/2022
SP	800-171 Rev. 3	Pre-Draft Call for Comments: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 3 (Draft) Pre-Draft Call for Comments: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 7/19/2022 Status: Draft Download: Protecting CUI project	Draft	7/19/2022
White Paper	NIST CSWP 27 ipd	Cybersecurity Profile for the Hybrid Satellite Networks (HSN) Cybersecurity: Draft Annotated Outline White Paper NIST CSWP 27 ipd (Draft) Cybersecurity Profile for the Hybrid Satellite Networks (HSN) Cybersecurity: Draft Annotated Outline 7/12/2022 Status: Draft Download: White Paper (DOI); NIST CSWP 27 ipd; Project homepage	Draft	7/12/2022
NISTIR	8413	Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8413 Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process 7/05/2022 Status: Final Download: NISTIR 8413 (DOI); Local Download; PQC Standardization Project; NIST news article	Final	7/05/2022
NISTIR	8323 Rev. 1	Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services NISTIR 8323 Rev. 1 (Draft) Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services 6/29/2022 Status: Draft Download: NISTIR 8323 Rev. 1 (Draft) (DOI); Local Download; Comment template; PNT homepage	Draft	6/29/2022
SP	800-219	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 6/24/2022 Status: Final Download: SP 800-219 (DOI); Local Download; mSCP GitHub site; mSCP project documentation	Final	6/24/2022
SP	1800-34	Validating the Integrity of Computing Devices SP 1800-34 (Draft) Validating the Integrity of Computing Devices 6/23/2022 Status: Draft Download: NIST SP 1800-34 ipd; Project homepage	Draft	6/23/2022
NISTIR	8425	Profile of the IoT Core Baseline for Consumer IoT Products NISTIR 8425 (Draft) Profile of the IoT Core Baseline for Consumer IoT Products 6/17/2022 Status: Draft Download: NISTIR 8425 (Draft) (DOI); Local Download; Ideas for the Future of IoT Cybersecurity at NIST: IoT Risk Identification Complexity	Draft	6/17/2022
White Paper	NIST CSWP 26	Ordered t-way Combinations for Testing State-based Systems White Paper NIST CSWP 26 Ordered t-way Combinations for Testing State-based Systems 6/13/2022 Status: Final Download: White Paper (DOI); NIST CSWP 26	Final	6/13/2022
NISTIR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response NISTIR 8286D (Draft) Using Business Impact Analysis to Inform Risk Prioritization and Response 6/09/2022 Status: Draft Download: NISTIR 8286D (Draft) (DOI); Local Download; See NISTIR 8286 Supplemental Material	Draft	6/09/2022
NISTIR	8409	Measuring the Common Vulnerability Scoring System Base Score Equation NISTIR 8409 (Draft) Measuring the Common Vulnerability Scoring System Base Score Equation 6/08/2022 Status: Draft Download: NISTIR 8409 (Draft) (DOI); Local Download	Draft	6/08/2022
SP	800-160 Vol. 1 Rev. 1	Engineering Trustworthy Secure Systems SP 800-160 Vol. 1 Rev. 1 (Draft) Engineering Trustworthy Secure Systems 6/07/2022 Status: Draft Download: SP 800-160 Vol. 1 Rev. 1 (Draft) (DOI); Local Download; Comment template; Systems Security Engineering (SSE) Project	Draft	6/07/2022
NISTIR	8403	Blockchain for Access Control Systems NISTIR 8403 Blockchain for Access Control Systems 5/26/2022 Status: Final Download: NISTIR 8403 (DOI); Local Download	Final	5/26/2022
SP	800-140C Rev. 1	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 1 CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Final Download: SP 800-140C Rev. 1 (DOI); Local Download	Final	5/20/2022
SP	800-140D Rev. 1	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 1 CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Final Download: SP 800-140D Rev. 1 (DOI); Local Download	Final	5/20/2022
White Paper	NIST CSWP 25	A Data Structure for Integrity Protection with Erasure Capability White Paper NIST CSWP 25 A Data Structure for Integrity Protection with Erasure Capability 5/20/2022 Status: Final Download: White Paper (DOI); NIST CSWP 25	Final	5/20/2022
SP	800-140B Rev. 1	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B Rev. 1 (Draft) CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 5/12/2022 Status: Draft Download: SP 800-140B Rev. 1 (Draft) (DOI); Local Download	Draft	5/12/2022
White Paper	NIST CSWP 20	Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators White Paper NIST CSWP 20 Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators 5/06/2022 Status: Final Download: White Paper (DOI); NIST CSWP 20	Final	5/06/2022
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations 5/05/2022 Status: Final Download: SP 800-161 Rev. 1 (DOI); Local Download; EO 14028: Software Security in Supply Chains; NIST’s Cyber Supply Chain Risk Management Program; NIST news article	Final	5/05/2022

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs