Search | CSRC

Search Results

Showing 87 matching records.

Series	Number	Title Publications	Status	Release Date
IR	8496	Data Classification Concepts and Considerations for Improving Data Collection IR 8496 (Initial Public Draft) Data Classification Concepts and Considerations for Improving Data Collection 11/15/2023 Status: Draft	Draft	11/15/2023
SP	800-171A Rev. 3	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A Rev. 3 (Initial Public Draft) Assessing Security Requirements for Controlled Unclassified Information 11/09/2023 Status: Draft	Draft	11/09/2023
SP	800-171 Rev. 3	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 3 (Final Public Draft) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 11/09/2023 Status: Draft	Draft	11/09/2023
SP	1800-36	Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security SP 1800-36 (2nd Preliminary Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security 10/31/2023 Status: Draft	Draft	10/31/2023
SP	800-92 Rev. 1	Cybersecurity Log Management Planning Guide SP 800-92 Rev. 1 (Initial Public Draft) Cybersecurity Log Management Planning Guide 10/11/2023 Status: Draft	Draft	10/11/2023
SP	800-73-5	Interfaces for Personal Identity Verification: Part 2 – PIV Card Application Card Command Interface SP 800-73-5 (Initial Public Draft) Interfaces for Personal Identity Verification: Part 2 – PIV Card Application Card Command Interface 9/27/2023 Status: Draft	Draft	9/27/2023
SP	800-73-5	Interfaces for Personal Identity Verification: Part 3 – PIV Client Application Programming Interface SP 800-73-5 (Initial Public Draft) Interfaces for Personal Identity Verification: Part 3 – PIV Client Application Programming Interface 9/27/2023 Status: Draft	Draft	9/27/2023
SP	800-73-5	Interfaces for Personal Identity Verification: Part 1 – PIV Card Application Namespace, Data Model and Representation SP 800-73-5 (Initial Public Draft) Interfaces for Personal Identity Verification: Part 1 – PIV Card Application Namespace, Data Model and Representation 9/27/2023 Status: Draft	Draft	9/27/2023
SP	800-78-5	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78-5 (Initial Public Draft) Cryptographic Algorithms and Key Sizes for Personal Identity Verification 9/27/2023 Status: Draft	Draft	9/27/2023
SP	1800-35	Implementing a Zero Trust Architecture (Volume E, Risk and Compliance Management) SP 1800-35 (2nd Preliminary Draft) Implementing a Zero Trust Architecture (Volume E, Risk and Compliance Management) 9/12/2023 Status: Draft	Draft	9/12/2023
IR	8472	Non-Fungible Token Security IR 8472 (Initial Public Draft) Non-Fungible Token Security 8/31/2023 Status: Draft	Draft	8/31/2023
IR	8481	Cybersecurity for Research: Findings and Possible Paths Forward IR 8481 (Initial Public Draft) Cybersecurity for Research: Findings and Possible Paths Forward 8/31/2023 Status: Draft	Draft	8/31/2023
SP	800-204D	Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD pipelines SP 800-204D (Initial Public Draft) Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD pipelines 8/30/2023 Status: Draft	Draft	8/30/2023
SP	800-50 Rev. 1	Building a Cybersecurity and Privacy Learning Program SP 800-50 Rev. 1 (Initial Public Draft) Building a Cybersecurity and Privacy Learning Program 8/28/2023 Status: Draft	Draft	8/28/2023
FIPS	203	Module-Lattice-Based Key-Encapsulation Mechanism Standard FIPS 203 (Initial Public Draft) Module-Lattice-Based Key-Encapsulation Mechanism Standard 8/24/2023 Status: Draft	Draft	8/24/2023
FIPS	205	Stateless Hash-Based Digital Signature Standard FIPS 205 (Initial Public Draft) Stateless Hash-Based Digital Signature Standard 8/24/2023 Status: Draft	Draft	8/24/2023
FIPS	204	Module-Lattice-Based Digital Signature Standard FIPS 204 (Initial Public Draft) Module-Lattice-Based Digital Signature Standard 8/24/2023 Status: Draft	Draft	8/24/2023
SP	1800-35	Implementing a Zero Trust Architecture SP 1800-35 (3rd Preliminary Draft) Implementing a Zero Trust Architecture 8/22/2023 Status: Draft	Draft	8/22/2023
IR	8477	Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings IR 8477 (Initial Public Draft) Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings 8/17/2023 Status: Draft	Draft	8/17/2023
CSWP	29	The NIST Cybersecurity Framework 2.0 CSWP 29 (Initial Public Draft) The NIST Cybersecurity Framework 2.0 8/08/2023 Status: Draft	Draft	8/08/2023
Other		Discussion Draft of the NIST Cybersecurity Framework 2.0 Core with Implementation Examples Other (Initial Public Draft) Discussion Draft of the NIST Cybersecurity Framework 2.0 Core with Implementation Examples 8/08/2023 Status: Draft	Draft	8/08/2023
IR	8467	Cybersecurity Framework Profile for Genomic Data IR 8467 (Initial Public Draft) Cybersecurity Framework Profile for Genomic Data 6/15/2023 Status: Draft	Draft	6/15/2023
SP	1800-40	Automation of the NIST Cryptographic Module Validation Program SP 1800-40 (Initial Preliminary Draft) Automation of the NIST Cryptographic Module Validation Program 6/07/2023 Status: Draft	Draft	6/07/2023
SP	1800-37	Addressing Visibility Challenges with TLS 1.3 SP 1800-37 (Initial Preliminary Draft) Addressing Visibility Challenges with TLS 1.3 5/12/2023 Status: Draft	Draft	5/12/2023
IR	8460	State Machine Replication and Consensus with Byzantine Adversaries IR 8460 (Initial Public Draft) State Machine Replication and Consensus with Byzantine Adversaries 4/26/2023 Status: Draft	Draft	4/26/2023
SP	1800-39	Implementing Data Classification Practices SP 1800-39 (Initial Preliminary Draft) Implementing Data Classification Practices 4/25/2023 Status: Draft	Draft	4/25/2023
SP	1800-38	Migration to Post-Quantum Cryptography: Preparation for Considering the Implementation and Adoption of Quantum Safe Cryptography SP 1800-38 (Initial Preliminary Draft) Migration to Post-Quantum Cryptography: Preparation for Considering the Implementation and Adoption of Quantum Safe Cryptography 4/24/2023 Status: Draft	Draft	4/24/2023
IR	8459	Report on the Block Cipher Modes of Operation in the NIST SP 800-38 Series IR 8459 (Initial Public Draft) Report on the Block Cipher Modes of Operation in the NIST SP 800-38 Series 3/21/2023 Status: Draft	Draft	3/21/2023
AI	100-2 E2023	Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations AI 100-2 E2023 (Initial Public Draft) Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations 3/08/2023 Status: Draft	Draft	3/08/2023
IR	8432	Cybersecurity of Genomic Data IR 8432 (Initial Public Draft) Cybersecurity of Genomic Data 3/03/2023 Status: Draft	Draft	3/03/2023
IR	8320D	Hardware-Enabled Security: Hardware-Based Confidential Computing IR 8320D (Initial Public Draft) Hardware-Enabled Security: Hardware-Based Confidential Computing 2/23/2023 Status: Draft	Draft	2/23/2023
SP	800-201	NIST Cloud Computing Forensic Reference Architecture SP 800-201 (Initial Public Draft) NIST Cloud Computing Forensic Reference Architecture 2/08/2023 Status: Draft	Draft	2/08/2023
SP	800-223	High-Performance Computing (HPC) Security: Architecture, Threat Analysis, and Security Posture SP 800-223 (Initial Public Draft) High-Performance Computing (HPC) Security: Architecture, Threat Analysis, and Security Posture 2/06/2023 Status: Draft	Draft	2/06/2023
IR	8214C	NIST First Call for Multi-Party Threshold Schemes IR 8214C (Initial Public Draft) NIST First Call for Multi-Party Threshold Schemes 1/25/2023 Status: Draft	Draft	1/25/2023
SP	800-157 Rev. 1	Guidelines for Derived Personal Identity Verification (PIV) Credentials SP 800-157 Rev. 1 (Initial Public Draft) Guidelines for Derived Personal Identity Verification (PIV) Credentials 1/10/2023 Status: Draft	Draft	1/10/2023
SP	800-217	Guidelines for Personal Identity Verification (PIV) Federation SP 800-217 (Initial Public Draft) Guidelines for Personal Identity Verification (PIV) Federation 1/10/2023 Status: Draft	Draft	1/10/2023
SP	800-63B-4	Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B-4 (Initial Public Draft) Digital Identity Guidelines: Authentication and Lifecycle Management 12/16/2022 Status: Draft	Draft	12/16/2022
SP	800-63A-4	Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A-4 (Initial Public Draft) Digital Identity Guidelines: Enrollment and Identity Proofing 12/16/2022 Status: Draft	Draft	12/16/2022
SP	800-63-4	Digital Identity Guidelines SP 800-63-4 (Initial Public Draft) Digital Identity Guidelines 12/16/2022 Status: Draft	Draft	12/16/2022
SP	800-63C-4	Digital Identity Guidelines: Federation and Assertions SP 800-63C-4 (Initial Public Draft) Digital Identity Guidelines: Federation and Assertions 12/16/2022 Status: Draft	Draft	12/16/2022
IR	8278 Rev. 1	National Online Informative References (OLIR) Program: Overview, Benefits, and Use IR 8278 Rev. 1 (Initial Public Draft) National Online Informative References (OLIR) Program: Overview, Benefits, and Use 12/08/2022 Status: Draft	Draft	12/08/2022
IR	8278A Rev. 1	National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers IR 8278A Rev. 1 (Initial Public Draft) National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers 12/08/2022 Status: Draft	Draft	12/08/2022
SP	800-55 Rev. 2	Performance Measurement Guide for Information Security SP 800-55 Rev. 2 (Initial Working Draft) Performance Measurement Guide for Information Security 11/14/2022 Status: Draft	Draft	11/14/2022
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (3rd Public Draft) Recommendation for Random Bit Generator (RBG) Constructions 9/07/2022 Status: Draft	Draft	9/07/2022
IR	8214B	Notes on Threshold EdDSA/Schnorr Signatures IR 8214B (Initial Public Draft) Notes on Threshold EdDSA/Schnorr Signatures 8/12/2022 Status: Draft	Draft	8/12/2022
SP	800-66 Rev. 2	Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide SP 800-66 Rev. 2 (Initial Public Draft) Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide 7/21/2022 Status: Draft	Draft	7/21/2022
SP	1800-33	5G Cybersecurity SP 1800-33 (Initial Preliminary Draft) 5G Cybersecurity 4/25/2022 Status: Draft	Draft	4/25/2022
IR	8320C	Hardware-Enabled Security: Machine Identity Management and Protection IR 8320C (Initial Public Draft) Hardware-Enabled Security: Machine Identity Management and Protection 4/20/2022 Status: Draft	Draft	4/20/2022
IR	8349	Methodology for Characterizing Network Behavior of Internet of Things Devices IR 8349 (Initial Public Draft) Methodology for Characterizing Network Behavior of Internet of Things Devices 1/11/2022 Status: Draft	Draft	1/11/2022
Project Description		Secure IPv6-Only Implementation in the Enterprise Project Description (Initial Public Draft) Secure IPv6-Only Implementation in the Enterprise 12/09/2021 Status: Draft	Draft	12/09/2021
CSWP	22	Combination Frequency Differencing CSWP 22 (Initial Public Draft) Combination Frequency Differencing 12/06/2021 Status: Draft	Draft	12/06/2021
SP	800-140F Rev. 1	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F Rev. 1 (Initial Public Draft) CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft	Draft	8/20/2021
CSWP	19	Combinatorial Coverage Difference Measurement CSWP 19 (Initial Public Draft) Combinatorial Coverage Difference Measurement 6/22/2021 Status: Draft	Draft	6/22/2021
IR	8335	Identity as a Service for Public Safety Organizations IR 8335 (Initial Public Draft) Identity as a Service for Public Safety Organizations 6/16/2021 Status: Draft	Draft	6/16/2021
IR	8336	Background on Identity Federation Technologies for the Public Safety Community IR 8336 (Initial Public Draft) Background on Identity Federation Technologies for the Public Safety Community 6/09/2021 Status: Draft	Draft	6/09/2021
IR	8334	Using Mobile Device Biometrics for Authenticating First Responders IR 8334 (Initial Public Draft) Using Mobile Device Biometrics for Authenticating First Responders 6/02/2021 Status: Draft	Draft	6/02/2021
CSWP	18	Establishing Confidence in IoT Device Security: How do we get there? CSWP 18 (Initial Public Draft) Establishing Confidence in IoT Device Security: How do we get there? 5/14/2021 Status: Draft	Draft	5/14/2021
IR	8356	Considerations for Digital Twin Technology and Emerging Standards IR 8356 (Initial Public Draft) Considerations for Digital Twin Technology and Emerging Standards 4/16/2021 Status: Draft	Draft	4/16/2021
IR	8310	Cybersecurity Framework Election Infrastructure Profile IR 8310 (Initial Public Draft) Cybersecurity Framework Election Infrastructure Profile 3/29/2021 Status: Draft	Draft	3/29/2021
IR	8344	Ontology for Authentication IR 8344 (Initial Public Draft) Ontology for Authentication 2/08/2021 Status: Draft	Draft	2/08/2021
Other		Toward a PEC Use-Case Suite Other (Initial Preliminary Draft) Toward a PEC Use-Case Suite 1/21/2021 Status: Draft	Draft	1/21/2021
IR	8259C	Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline IR 8259C (Initial Public Draft) Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline 12/15/2020 Status: Draft	Draft	12/15/2020
CSWP	17	Securing Data Integrity Against Ransomware Attacks: Using the NIST Cybersecurity Framework and NIST Cybersecurity Practice Guides CSWP 17 (Initial Public Draft) Securing Data Integrity Against Ransomware Attacks: Using the NIST Cybersecurity Framework and NIST Cybersecurity Practice Guides 10/01/2020 Status: Draft	Draft	10/01/2020
SP	800-46 Rev. 3	PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security SP 800-46 Rev. 3 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security 9/10/2020 Status: Draft	Draft	9/10/2020
CSWP	16	Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management CSWP 16 (Initial Public Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management 9/08/2020 Status: Draft	Draft	9/08/2020
Project Description		Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) Project Description (Initial Public Draft) Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) 10/08/2019 Status: Draft	Draft	10/08/2019
IR	8267	Security Review of Consumer Home Internet of Things (IoT) Products IR 8267 (Initial Public Draft) Security Review of Consumer Home Internet of Things (IoT) Products 10/01/2019 Status: Draft	Draft	10/01/2019
Project Description		Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses Project Description (Initial Public Draft) Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft	Draft	6/17/2019
Other		An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning Other (Initial Public Draft) An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning 5/22/2019 Status: Draft	Draft	5/22/2019
IR	8213	A Reference for Randomness Beacons: Format and Protocol Version 2 IR 8213 (Initial Public Draft) A Reference for Randomness Beacons: Format and Protocol Version 2 5/06/2019 Status: Draft	Draft	5/06/2019
SP	800-38G Rev. 1	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Rev. 1 (Initial Public Draft) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 2/28/2019 Status: Draft	Draft	2/28/2019
Project Description		Security for IoT Sensor Networks: Building Management Case Study Project Description (Initial Public Draft) Security for IoT Sensor Networks: Building Management Case Study 2/01/2019 Status: Draft	Draft	2/01/2019
Other		Internet of Things (IoT) Trust Concerns Other (Initial Public Draft) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Draft	Draft	10/17/2018
SP	800-71	Recommendation for Key Establishment Using Symmetric Block Ciphers SP 800-71 (Initial Public Draft) Recommendation for Key Establishment Using Symmetric Block Ciphers 7/02/2018 Status: Draft	Draft	7/02/2018
IR	8193	National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles IR 8193 (Initial Public Draft) National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles 11/08/2017 Status: Draft	Draft	11/08/2017
Project Description		Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector Project Description (Initial Public Draft) Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector 10/12/2017 Status: Draft	Draft	10/12/2017
IR	8139	Identifying Uniformity with Entropy and Divergence IR 8139 (Initial Public Draft) Identifying Uniformity with Entropy and Divergence 2/02/2017 Status: Draft	Draft	2/02/2017
Project Description		Authentication for Law Enforcement Vehicle Systems Project Description (Initial Public Draft) Authentication for Law Enforcement Vehicle Systems 9/13/2016 Status: Draft	Draft	9/13/2016
IR	8144	Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue IR 8144 (Initial Public Draft) Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue 9/12/2016 Status: Draft	Draft	9/12/2016
Project Description		Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector Project Description (Initial Public Draft) Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector 5/09/2016 Status: Draft	Draft	5/09/2016
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (Initial Public Draft) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Draft	Draft	3/14/2016
SP	800-180	NIST Definition of Microservices, Application Containers and System Virtual Machines SP 800-180 (Initial Public Draft) NIST Definition of Microservices, Application Containers and System Virtual Machines 2/18/2016 Status: Draft	Draft	2/18/2016
IR	8085	Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags IR 8085 (Initial Public Draft) Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags 12/17/2015 Status: Draft	Draft	12/17/2015
IR	8058	Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content IR 8058 (Initial Public Draft) Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content 5/01/2015 Status: Draft	Draft	5/01/2015
SP	800-16 Rev. 1	A Role-Based Model for Federal Information Technology/Cybersecurity Training SP 800-16 Rev. 1 (3rd Public Draft) A Role-Based Model for Federal Information Technology/Cybersecurity Training 3/14/2014 Status: Draft	Draft	3/14/2014
IR	7848	Specification for the Asset Summary Reporting Format 1.0 IR 7848 (Initial Public Draft) Specification for the Asset Summary Reporting Format 1.0 5/07/2012 Status: Draft	Draft	5/07/2012
SP	800-155	BIOS Integrity Measurement Guidelines SP 800-155 (Initial Public Draft) BIOS Integrity Measurement Guidelines 12/08/2011 Status: Draft	Draft	12/08/2011

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs