U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

NISTIR 8170

Approaches for Federal Agencies to Use the Cybersecurity Framework

Date Published: March 2020 (includes updates as of August 17, 2021)

Supersedes: NISTIR 8170 (03/19/2020)

Author(s)

Matthew Barrett (NIST), Jeffrey Marron (NIST), Victoria Pillitteri (NIST), Jon Boyens (NIST), Stephen Quinn (NIST), Gregory Witte (Huntington Ingalls Industries), Larry Feldman (Huntington Ingalls Industries)

Abstract

Keywords

Cybersecurity Framework; Enterprise Risk Management; Federal Information Security Management Act (FISMA); Risk Management Framework (RMF); security and privacy controls
Control Families

None selected

Documentation

Publication:
NISTIR 8170 (DOI)
Local Download

Supplemental Material:
Cybersecurity Framework homepage (other)

Related NIST Publications:
NISTIR 8286
White Paper
SP 800-53 Rev. 4

Document History:
08/17/21: NISTIR 8170 (Final)