Publications

The NIST Cybersecurity and Privacy Program develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This catalog includes the following NIST technical publication series:

FIPS	Federal Information Processing Standards Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (only pubs on cybersecurity and privacy)
IR	NIST Interagency or Internal Reports (NIST IR) Reports of research findings, including background information for FIPS and SPs. The subset IRs listed here are related to the NIST Cybersecurity and Privacy Program.
CSWP	NIST Cybersecurity White Papers General white papers, thought pieces, and official cybersecurity- and privacy-related papers not published as a FIPS, SP, or IR.
Project Descriptions	Project Descriptions from the National Cybersecurity Center of Excellence (NCCoE).
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins (1990-2020) Monthly overviews of NIST's security and privacy publications, programs and projects.
Other publications in this catalog are from the following NIST technical series:
AI	Artificial Intelligence: AI series reports that are focused on cybersecurity and privacy. Also see the NIST Trustworty & Responsible AI Resource Center.
GCR	Grant/Contract Reports: Work perfromed solely by an external person/organization under a grant or contract with NIST.
TN	Technical Notes: Studies or reports that are very restrictive in their treatment of a subject.

Find more of our research in: Journal Articles, Conference Papers, Books, and Other miscellaneous papers. More of these publications from before 2008 will be added to this database.

More info:
- Download a spreadsheet (XLSX) of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins, and CSWPs.
- RSS/Atom and JSON feeds for Draft Publications Open for Comment.
- Learn about Digital Object Identifiers (DOI).
- See the Crypto Publication Review Project for current reviews of numerous cryptography standards, recommendations, and guidelines.

Inclusive language. We recognize that some NIST publications contain potentially biased terminology. As we revise publications, we are reviewing and editing that language based on NIST’s inclusive language guidance. New publications in development will also follow that guidance.

Series	Number	Title Publications	Status	Release Date
CSWP	30	Automation Support for Control Assessments: Project Update and Vision CSWP 30 (Final) Automation Support for Control Assessments: Project Update and Vision 12/06/2023 Status: Final	Final	12/06/2023
SP	800-221	Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio SP 800-221 (Final) Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023
SP	800-221A	Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio SP 800-221A (Final) Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023
SP	800-140B Rev. 1	Cryptographic Module Validation Program (CMVP) Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B Rev. 1 (Final) Cryptographic Module Validation Program (CMVP) Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 11/17/2023 Status: Final	Final	11/17/2023
IR	8496	Data Classification Concepts and Considerations for Improving Data Collection IR 8496 (Initial Public Draft) Data Classification Concepts and Considerations for Improving Data Collection 11/15/2023 Status: Draft	Draft	11/15/2023
TN	2276	NIST Phish Scale User Guide TN 2276 (Final) NIST Phish Scale User Guide 11/15/2023 Status: Final	Final	11/15/2023
SP	800-171A Rev. 3	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A Rev. 3 (Initial Public Draft) Assessing Security Requirements for Controlled Unclassified Information 11/09/2023 Status: Draft	Draft	11/09/2023
SP	800-171 Rev. 3	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 3 (Final Public Draft) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 11/09/2023 Status: Draft	Draft	11/09/2023
SP	1800-36	Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security SP 1800-36 (2nd Preliminary Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security 10/31/2023 Status: Draft	Draft	10/31/2023
IR	8473	Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure IR 8473 (Final) Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure 10/16/2023 Status: Final	Final	10/16/2023
SP	800-92 Rev. 1	Cybersecurity Log Management Planning Guide SP 800-92 Rev. 1 (Initial Public Draft) Cybersecurity Log Management Planning Guide 10/11/2023 Status: Draft	Draft	10/11/2023
IR	8406	Cybersecurity Framework Profile for Liquefied Natural Gas IR 8406 (Final) Cybersecurity Framework Profile for Liquefied Natural Gas 10/10/2023 Status: Final	Final	10/10/2023
SP	1800-22	Mobile Device Security: Bring Your Own Device (BYOD) SP 1800-22 (Final) Mobile Device Security: Bring Your Own Device (BYOD) 9/28/2023 Status: Final	Final	9/28/2023
SP	800-82 Rev. 3	Guide to Operational Technology (OT) Security SP 800-82 Rev. 3 (Final) Guide to Operational Technology (OT) Security 9/28/2023 Status: Final	Final	9/28/2023
SP	800-73-5	Interfaces for Personal Identity Verification: Part 2 – PIV Card Application Card Command Interface SP 800-73-5 (Initial Public Draft) Interfaces for Personal Identity Verification: Part 2 – PIV Card Application Card Command Interface 9/27/2023 Status: Draft	Draft	9/27/2023
SP	800-73-5	Interfaces for Personal Identity Verification: Part 3 – PIV Client Application Programming Interface SP 800-73-5 (Initial Public Draft) Interfaces for Personal Identity Verification: Part 3 – PIV Client Application Programming Interface 9/27/2023 Status: Draft	Draft	9/27/2023
SP	800-73-5	Interfaces for Personal Identity Verification: Part 1 – PIV Card Application Namespace, Data Model and Representation SP 800-73-5 (Initial Public Draft) Interfaces for Personal Identity Verification: Part 1 – PIV Card Application Namespace, Data Model and Representation 9/27/2023 Status: Draft	Draft	9/27/2023
SP	800-78-5	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78-5 (Initial Public Draft) Cryptographic Algorithms and Key Sizes for Personal Identity Verification 9/27/2023 Status: Draft	Draft	9/27/2023
IR	8476	3rd High-Performance Computing Security Workshop: Joint NIST-NSF Workshop Report IR 8476 (Final) 3rd High-Performance Computing Security Workshop: Joint NIST-NSF Workshop Report 9/26/2023 Status: Final	Final	9/26/2023
IR	8441	Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN) IR 8441 (Final) Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN) 9/25/2023 Status: Final	Final	9/25/2023
SP	800-188	De-Identifying Government Datasets: Techniques and Governance SP 800-188 (Final) De-Identifying Government Datasets: Techniques and Governance 9/14/2023 Status: Final	Final	9/14/2023
SP	800-207A	A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Cloud Environments SP 800-207A (Final) A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Cloud Environments 9/13/2023 Status: Final	Final	9/13/2023
SP	1800-35	Implementing a Zero Trust Architecture (Volume E, Risk and Compliance Management) SP 1800-35 (2nd Preliminary Draft) Implementing a Zero Trust Architecture (Volume E, Risk and Compliance Management) 9/12/2023 Status: Draft	Draft	9/12/2023
IR	8450	Overview and Considerations of Access Control Based on Attribute Encryption IR 8450 (Final) Overview and Considerations of Access Control Based on Attribute Encryption 9/06/2023 Status: Final	Final	9/06/2023
IR	8408	Understanding Stablecoin Technology and Related Security Considerations IR 8408 (Final) Understanding Stablecoin Technology and Related Security Considerations 9/05/2023 Status: Final	Final	9/05/2023

Current Publications

Publications

Recent Publications

Current Publications