Search | CSRC

Search Results

Showing 89 matching records.

Series	Number	Title Publications	Status	Release Date
SP	1800-35	Implementing a Zero Trust Architecture SP 1800-35 (Initial Public Draft) Implementing a Zero Trust Architecture 12/04/2024 Status: Draft	Draft	12/04/2024
CSWP	38	NIST Privacy Workforce Taxonomy CSWP 38 (Initial Public Draft) NIST Privacy Workforce Taxonomy 11/21/2024 Status: Draft	Draft	11/21/2024
SP	800-157 Rev. 1	Guidelines for Derived Personal Identity Verification (PIV) Credentials SP 800-157 Rev. 1 (Final Public Draft) Guidelines for Derived Personal Identity Verification (PIV) Credentials 11/14/2024 Status: Draft	Draft	11/14/2024
SP	800-217	Guidelines for Personal Identity Verification (PIV) Federation SP 800-217 (Final Public Draft) Guidelines for Personal Identity Verification (PIV) Federation 11/14/2024 Status: Draft	Draft	11/14/2024
SP	800-172 Rev. 3	Enhanced Security Requirements for Protecting Controlled Unclassified Information SP 800-172 Rev. 3 (Initial Public Draft) Enhanced Security Requirements for Protecting Controlled Unclassified Information 11/13/2024 Status: Draft	Draft	11/13/2024
IR	8547	Transition to Post-Quantum Cryptography Standards IR 8547 (Initial Public Draft) Transition to Post-Quantum Cryptography Standards 11/12/2024 Status: Draft	Draft	11/12/2024
SP	800-232	Ascon-Based Lightweight Cryptography Standards for Constrained Devices: Authenticated Encryption, Hash, and Extendable Output Functions SP 800-232 (Initial Public Draft) Ascon-Based Lightweight Cryptography Standards for Constrained Devices: Authenticated Encryption, Hash, and Extendable Output Functions 11/08/2024 Status: Draft	Draft	11/08/2024
CSWP	34	Mitigating Cybersecurity and Privacy Risks in Telehealth Smart Home Integration: Healthcare and Public Health Sector Risk Management Approaches CSWP 34 (Initial Public Draft) Mitigating Cybersecurity and Privacy Risks in Telehealth Smart Home Integration: Healthcare and Public Health Sector Risk Management Approaches 11/06/2024 Status: Draft	Draft	11/06/2024
CSWP	36C	Reallocation of Temporary Identities: Applying 5G Cybersecurity and Privacy Capabilities CSWP 36C (Initial Public Draft) Reallocation of Temporary Identities: Applying 5G Cybersecurity and Privacy Capabilities 11/06/2024 Status: Draft	Draft	11/06/2024
CSWP	37	Automation of the NIST Cryptographic Module Validation Program: September 2024 Status Report CSWP 37 (Initial Public Draft) Automation of the NIST Cryptographic Module Validation Program: September 2024 Status Report 10/31/2024 Status: Draft	Draft	10/31/2024
SP	1326	NIST Cybersecurity Supply Chain Risk Management: Due Diligence Assessment Quick-Start Guide SP 1326 (Initial Public Draft) NIST Cybersecurity Supply Chain Risk Management: Due Diligence Assessment Quick-Start Guide 10/30/2024 Status: Draft	Draft	10/30/2024
SP	800-131A Rev. 3	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 3 (Initial Public Draft) Transitioning the Use of Cryptographic Algorithms and Key Lengths 10/21/2024 Status: Draft	Draft	10/21/2024
IR	8539	Security Property Verification by Transition Model IR 8539 (Initial Public Draft) Security Property Verification by Transition Model 10/08/2024 Status: Draft	Draft	10/08/2024
IR	8480	Attribute Validation Services for Identity Management: Architecture, Security, Privacy, and Operational Considerations IR 8480 (Initial Public Draft) Attribute Validation Services for Identity Management: Architecture, Security, Privacy, and Operational Considerations 10/07/2024 Status: Draft	Draft	10/07/2024
CSWP	36B	Using Hardware-Enabled Security to Ensure 5G System Platform Integrity: Applying 5G Cybersecurity and Privacy Capabilities CSWP 36B (Initial Public Draft) Using Hardware-Enabled Security to Ensure 5G System Platform Integrity: Applying 5G Cybersecurity and Privacy Capabilities 9/30/2024 Status: Draft	Draft	9/30/2024
IR	8536	Supply Chain Traceability: Manufacturing Meta-Framework IR 8536 (Initial Public Draft) Supply Chain Traceability: Manufacturing Meta-Framework 9/27/2024 Status: Draft	Draft	9/27/2024
IR	8446	Bridging the Gap between Standards on Random Number Generation: Comparison of SP 800-90 Series and AIS 20/31 IR 8446 (Initial Public Draft) Bridging the Gap between Standards on Random Number Generation: Comparison of SP 800-90 Series and AIS 20/31 9/16/2024 Status: Draft	Draft	9/16/2024
SP	800-63-4	Digital Identity Guidelines SP 800-63-4 (2nd Public Draft) Digital Identity Guidelines 8/21/2024 Status: Draft	Draft	8/21/2024
SP	800-63A-4	Digital Identity Guidelines: Identity Proofing and Enrollment SP 800-63A-4 (2nd Public Draft) Digital Identity Guidelines: Identity Proofing and Enrollment 8/21/2024 Status: Draft	Draft	8/21/2024
SP	800-63B-4	Digital Identity Guidelines: Authentication and Authenticator Management SP 800-63B-4 (2nd Public Draft) Digital Identity Guidelines: Authentication and Authenticator Management 8/21/2024 Status: Draft	Draft	8/21/2024
SP	800-63C-4	Digital Identity Guidelines: Federation and Assertions SP 800-63C-4 (2nd Public Draft) Digital Identity Guidelines: Federation and Assertions 8/21/2024 Status: Draft	Draft	8/21/2024
CSWP	36	Applying 5G Cybersecurity and Privacy Capabilities: Introduction to the White Paper Series CSWP 36 (Initial Public Draft) Applying 5G Cybersecurity and Privacy Capabilities: Introduction to the White Paper Series 8/15/2024 Status: Draft	Draft	8/15/2024
CSWP	36A	Protecting Subscriber Identifiers with Subscription Concealed Identifier (SUCI): Applying 5G Cybersecurity and Privacy Capabilities CSWP 36A (Initial Public Draft) Protecting Subscriber Identifiers with Subscription Concealed Identifier (SUCI): Applying 5G Cybersecurity and Privacy Capabilities 8/15/2024 Status: Draft	Draft	8/15/2024
IR	8532	Workshop on Enhancing Security of Devices and Components Across the Supply Chain IR 8532 (Initial Public Draft) Workshop on Enhancing Security of Devices and Components Across the Supply Chain 8/14/2024 Status: Draft	Draft	8/14/2024
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (4th Public Draft) Recommendation for Random Bit Generator (RBG) Constructions 7/03/2024 Status: Draft	Draft	7/03/2024
SP	800-224	Keyed-Hash Message Authentication Code (HMAC): Specification of HMAC and Recommendations for Message Authentication SP 800-224 (Initial Public Draft) Keyed-Hash Message Authentication Code (HMAC): Specification of HMAC and Recommendations for Message Authentication 6/28/2024 Status: Draft	Draft	6/28/2024
TN	2283	Cybersecurity for the Water and Wastewater Sector: Build Architecture. Operational Technology Remote Access TN 2283 (Initial Public Draft) Cybersecurity for the Water and Wastewater Sector: Build Architecture. Operational Technology Remote Access 6/12/2024 Status: Draft	Draft	6/12/2024
SP	1800-36	Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security SP 1800-36 (Initial Public Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security 5/31/2024 Status: Draft	Draft	5/31/2024
IR	8498	Cybersecurity for Smart Inverters: Guidelines for Residential and Light Commercial Solar Energy Systems IR 8498 (Initial Public Draft) Cybersecurity for Smart Inverters: Guidelines for Residential and Light Commercial Solar Energy Systems 5/10/2024 Status: Draft	Draft	5/10/2024
IR	8475	A Security Perspective on the Web3 Paradigm IR 8475 (Initial Public Draft) A Security Perspective on the Web3 Paradigm 4/11/2024 Status: Draft	Draft	4/11/2024
Other		Proposal of Requirements for an Accordion Mode: Discussion Draft for the NIST Accordion Mode Workshop 2024 Other (Initial Preliminary Draft) Proposal of Requirements for an Accordion Mode: Discussion Draft for the NIST Accordion Mode Workshop 2024 4/10/2024 Status: Draft	Draft	4/10/2024
CSWP	33	Product Development Cybersecurity Handbook: Concepts and Considerations for IoT Product Manufacturers CSWP 33 (Initial Public Draft) Product Development Cybersecurity Handbook: Concepts and Considerations for IoT Product Manufacturers 4/03/2024 Status: Draft	Draft	4/03/2024
SP	800-61 Rev. 3	Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile SP 800-61 Rev. 3 (Initial Public Draft) Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile 4/03/2024 Status: Draft	Draft	4/03/2024
IR	7621 Rev. 2	PRE-DRAFT Call for Comments \| Small Business Information Security: The Fundamentals IR 7621 Rev. 2 (Initial Preliminary Draft) PRE-DRAFT Call for Comments \| Small Business Information Security: The Fundamentals 3/18/2024 Status: Draft	Draft	3/18/2024
CSWP	32	NIST Cybersecurity Framework 2.0: A Guide to Creating Community Profiles CSWP 32 (Initial Public Draft) NIST Cybersecurity Framework 2.0: A Guide to Creating Community Profiles 2/26/2024 Status: Draft	Draft	2/26/2024
SP	800-60 Rev. 2	Guide for Mapping Types of Information and Systems to Security Categories SP 800-60 Rev. 2 (Initial Working Draft) Guide for Mapping Types of Information and Systems to Security Categories 1/31/2024 Status: Draft	Draft	1/31/2024
SP	1800-37	Addressing Visibility Challenges with TLS 1.3 within the Enterprise SP 1800-37 (2nd Preliminary Draft) Addressing Visibility Challenges with TLS 1.3 within the Enterprise 1/30/2024 Status: Draft	Draft	1/30/2024
SP	800-100 Rev. 1	PRE-DRAFT Call for Comments \| Information Security Handbook: A Guide for Managers SP 800-100 Rev. 1 (Initial Preliminary Draft) PRE-DRAFT Call for Comments \| Information Security Handbook: A Guide for Managers 1/09/2024 Status: Draft	Draft	1/09/2024
SP	1800-38	Migration to Post-Quantum Cryptography: Preparation for Considering the Implementation and Adoption of Quantum Safe Cryptography SP 1800-38 (Initial Preliminary Draft) Migration to Post-Quantum Cryptography: Preparation for Considering the Implementation and Adoption of Quantum Safe Cryptography 12/19/2023 Status: Draft	Draft	12/19/2023
SP	800-79 Rev. 3	Guidelines for the Authorization of PIV Card and Derived PIV Credential Issuers SP 800-79 Rev. 3 (Initial Public Draft) Guidelines for the Authorization of PIV Card and Derived PIV Credential Issuers 12/13/2023 Status: Draft	Draft	12/13/2023
SP	800-226	Guidelines for Evaluating Differential Privacy Guarantees SP 800-226 (Initial Public Draft) Guidelines for Evaluating Differential Privacy Guarantees 12/11/2023 Status: Draft	Draft	12/11/2023
IR	8496	Data Classification Concepts and Considerations for Improving Data Collection IR 8496 (Initial Public Draft) Data Classification Concepts and Considerations for Improving Data Collection 11/15/2023 Status: Draft	Draft	11/15/2023
SP	800-92 Rev. 1	Cybersecurity Log Management Planning Guide SP 800-92 Rev. 1 (Initial Public Draft) Cybersecurity Log Management Planning Guide 10/11/2023 Status: Draft	Draft	10/11/2023
IR	8481	Cybersecurity for Research: Findings and Possible Paths Forward IR 8481 (Initial Public Draft) Cybersecurity for Research: Findings and Possible Paths Forward 8/31/2023 Status: Draft	Draft	8/31/2023
IR	8467	Cybersecurity Framework Profile for Genomic Data IR 8467 (Initial Public Draft) Cybersecurity Framework Profile for Genomic Data 6/15/2023 Status: Draft	Draft	6/15/2023
SP	1800-40	Automation of the NIST Cryptographic Module Validation Program SP 1800-40 (Initial Preliminary Draft) Automation of the NIST Cryptographic Module Validation Program 6/07/2023 Status: Draft	Draft	6/07/2023
IR	8460	State Machine Replication and Consensus with Byzantine Adversaries IR 8460 (Initial Public Draft) State Machine Replication and Consensus with Byzantine Adversaries 4/26/2023 Status: Draft	Draft	4/26/2023
SP	1800-39	Implementing Data Classification Practices SP 1800-39 (Initial Preliminary Draft) Implementing Data Classification Practices 4/25/2023 Status: Draft	Draft	4/25/2023
IR	8320D	Hardware-Enabled Security: Hardware-Based Confidential Computing IR 8320D (Initial Public Draft) Hardware-Enabled Security: Hardware-Based Confidential Computing 2/23/2023 Status: Draft	Draft	2/23/2023
IR	8214C	NIST First Call for Multi-Party Threshold Schemes IR 8214C (Initial Public Draft) NIST First Call for Multi-Party Threshold Schemes 1/25/2023 Status: Draft	Draft	1/25/2023
IR	8214B	Notes on Threshold EdDSA/Schnorr Signatures IR 8214B (Initial Public Draft) Notes on Threshold EdDSA/Schnorr Signatures 8/12/2022 Status: Draft	Draft	8/12/2022
SP	1800-33	5G Cybersecurity SP 1800-33 (Initial Preliminary Draft) 5G Cybersecurity 4/25/2022 Status: Draft	Draft	4/25/2022
IR	8320C	Hardware-Enabled Security: Machine Identity Management and Protection IR 8320C (Initial Public Draft) Hardware-Enabled Security: Machine Identity Management and Protection 4/20/2022 Status: Draft	Draft	4/20/2022
IR	8349	Methodology for Characterizing Network Behavior of Internet of Things Devices IR 8349 (Initial Public Draft) Methodology for Characterizing Network Behavior of Internet of Things Devices 1/11/2022 Status: Draft	Draft	1/11/2022
Project Description		Secure IPv6-Only Implementation in the Enterprise Project Description (Initial Public Draft) Secure IPv6-Only Implementation in the Enterprise 12/09/2021 Status: Draft	Draft	12/09/2021
CSWP	22	Combination Frequency Differencing CSWP 22 (Initial Public Draft) Combination Frequency Differencing 12/06/2021 Status: Draft	Draft	12/06/2021
SP	800-140F Rev. 1	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F Rev. 1 (Initial Public Draft) CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft	Draft	8/20/2021
CSWP	19	Combinatorial Coverage Difference Measurement CSWP 19 (Initial Public Draft) Combinatorial Coverage Difference Measurement 6/22/2021 Status: Draft	Draft	6/22/2021
IR	8335	Identity as a Service for Public Safety Organizations IR 8335 (Initial Public Draft) Identity as a Service for Public Safety Organizations 6/16/2021 Status: Draft	Draft	6/16/2021
IR	8336	Background on Identity Federation Technologies for the Public Safety Community IR 8336 (Initial Public Draft) Background on Identity Federation Technologies for the Public Safety Community 6/09/2021 Status: Draft	Draft	6/09/2021
IR	8334	Using Mobile Device Biometrics for Authenticating First Responders IR 8334 (Initial Public Draft) Using Mobile Device Biometrics for Authenticating First Responders 6/02/2021 Status: Draft	Draft	6/02/2021
CSWP	18	Establishing Confidence in IoT Device Security: How do we get there? CSWP 18 (Initial Public Draft) Establishing Confidence in IoT Device Security: How do we get there? 5/14/2021 Status: Draft	Draft	5/14/2021
IR	8356	Considerations for Digital Twin Technology and Emerging Standards IR 8356 (Initial Public Draft) Considerations for Digital Twin Technology and Emerging Standards 4/16/2021 Status: Draft	Draft	4/16/2021
IR	8344	Ontology for Authentication IR 8344 (Initial Public Draft) Ontology for Authentication 2/08/2021 Status: Draft	Draft	2/08/2021
Other		Toward a PEC Use-Case Suite Other (Initial Preliminary Draft) Toward a PEC Use-Case Suite 1/21/2021 Status: Draft	Draft	1/21/2021
IR	8259C	Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline IR 8259C (Initial Public Draft) Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline 12/15/2020 Status: Draft	Draft	12/15/2020
CSWP	17	Securing Data Integrity Against Ransomware Attacks: Using the NIST Cybersecurity Framework and NIST Cybersecurity Practice Guides CSWP 17 (Initial Public Draft) Securing Data Integrity Against Ransomware Attacks: Using the NIST Cybersecurity Framework and NIST Cybersecurity Practice Guides 10/01/2020 Status: Draft	Draft	10/01/2020
SP	800-46 Rev. 3	PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security SP 800-46 Rev. 3 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security 9/10/2020 Status: Draft	Draft	9/10/2020
CSWP	16	Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management CSWP 16 (Initial Public Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management 9/08/2020 Status: Draft	Draft	9/08/2020
Project Description		Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) Project Description (Initial Public Draft) Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) 10/08/2019 Status: Draft	Draft	10/08/2019
IR	8267	Security Review of Consumer Home Internet of Things (IoT) Products IR 8267 (Initial Public Draft) Security Review of Consumer Home Internet of Things (IoT) Products 10/01/2019 Status: Draft	Draft	10/01/2019
Project Description		Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses Project Description (Initial Public Draft) Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft	Draft	6/17/2019
Other		An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning Other (Initial Public Draft) An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning 5/22/2019 Status: Draft	Draft	5/22/2019
IR	8213	A Reference for Randomness Beacons: Format and Protocol Version 2 IR 8213 (Initial Public Draft) A Reference for Randomness Beacons: Format and Protocol Version 2 5/06/2019 Status: Draft	Draft	5/06/2019
SP	800-38G Rev. 1	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Rev. 1 (Initial Public Draft) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 2/28/2019 Status: Draft	Draft	2/28/2019
Project Description		Security for IoT Sensor Networks: Building Management Case Study Project Description (Initial Public Draft) Security for IoT Sensor Networks: Building Management Case Study 2/01/2019 Status: Draft	Draft	2/01/2019
Other		Internet of Things (IoT) Trust Concerns Other (Initial Public Draft) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Draft	Draft	10/17/2018
SP	800-71	Recommendation for Key Establishment Using Symmetric Block Ciphers SP 800-71 (Initial Public Draft) Recommendation for Key Establishment Using Symmetric Block Ciphers 7/02/2018 Status: Draft	Draft	7/02/2018
IR	8193	National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles IR 8193 (Initial Public Draft) National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles 11/08/2017 Status: Draft	Draft	11/08/2017
Project Description		Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector Project Description (Initial Public Draft) Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector 10/12/2017 Status: Draft	Draft	10/12/2017
IR	8139	Identifying Uniformity with Entropy and Divergence IR 8139 (Initial Public Draft) Identifying Uniformity with Entropy and Divergence 2/02/2017 Status: Draft	Draft	2/02/2017
Project Description		Authentication for Law Enforcement Vehicle Systems Project Description (Initial Public Draft) Authentication for Law Enforcement Vehicle Systems 9/13/2016 Status: Draft	Draft	9/13/2016
IR	8144	Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue IR 8144 (Initial Public Draft) Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue 9/12/2016 Status: Draft	Draft	9/12/2016
Project Description		Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector Project Description (Initial Public Draft) Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector 5/09/2016 Status: Draft	Draft	5/09/2016
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (Initial Public Draft) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Draft	Draft	3/14/2016
SP	800-180	NIST Definition of Microservices, Application Containers and System Virtual Machines SP 800-180 (Initial Public Draft) NIST Definition of Microservices, Application Containers and System Virtual Machines 2/18/2016 Status: Draft	Draft	2/18/2016
IR	8085	Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags IR 8085 (Initial Public Draft) Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags 12/17/2015 Status: Draft	Draft	12/17/2015
IR	8058	Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content IR 8058 (Initial Public Draft) Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content 5/01/2015 Status: Draft	Draft	5/01/2015
IR	7848	Specification for the Asset Summary Reporting Format 1.0 IR 7848 (Initial Public Draft) Specification for the Asset Summary Reporting Format 1.0 5/07/2012 Status: Draft	Draft	5/07/2012

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs