Search | CSRC

Search Results

Showing 69 matching records.

Series	Number	Title Publications	Status	Release Date
SP	1800-30	Securing Telehealth Remote Patient Monitoring Ecosystem SP 1800-30 (Draft) Securing Telehealth Remote Patient Monitoring Ecosystem 11/16/2020 Status: Draft Download: Draft SP 1800-30 volumes and Project homepage; Submit comments	Draft	11/16/2020
FIPS	201-3	Personal Identity Verification (PIV) of Federal Employees and Contractors FIPS 201-3 (Draft) Personal Identity Verification (PIV) of Federal Employees and Contractors 11/02/2020 Status: Draft Download: FIPS 201-3 (Draft) (DOI); Local Download; Web-based publication; GitHub: review and comment; Comment template; Posted comments; Federal Register Notice; FIPS 201-3 Virtual Workshop (Dec. 9)	Draft	11/02/2020
NISTIR	8323	Cybersecurity Profile for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services NISTIR 8323 (Draft) Cybersecurity Profile for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services 10/22/2020 Status: Draft Download: NISTIR 8323 (Draft) (DOI); Local Download; Template for submitting comments; Comments received	Draft	10/22/2020
NISTIR	8212	ISCMA: An Information Security Continuous Monitoring Program Assessment NISTIR 8212 (Draft) ISCMA: An Information Security Continuous Monitoring Program Assessment 10/01/2020 Status: Draft Download: NISTIR 8212 (Draft) (DOI); Local Download; Comment template; ISCMAx: Recommended Judgments; ISCMAx: Alternate Judgments	Draft	10/01/2020
White Paper		Securing Data Integrity Against Ransomware Attacks: Using the NIST Cybersecurity Framework and NIST Cybersecurity Practice Guides White Paper (Draft) Securing Data Integrity Against Ransomware Attacks: Using the NIST Cybersecurity Framework and NIST Cybersecurity Practice Guides 10/01/2020 Status: Draft Download: White Paper (DOI); Local Download; Submit comments; Project homepage	Draft	10/01/2020
NISTIR	8301	Blockchain Networks: Token Design and Management Overview NISTIR 8301 (Draft) Blockchain Networks: Token Design and Management Overview 9/29/2020 Status: Draft Download: NISTIR 8301 (Draft) (DOI); Local Download; Comment template	Draft	9/29/2020
NISTIR	8235	Security Guidance for First Responder Mobile and Wearable Devices NISTIR 8235 (Draft) Security Guidance for First Responder Mobile and Wearable Devices 9/28/2020 Status: Draft Download: NISTIR 8235 (Draft) (DOI); Local Download	Draft	9/28/2020
SP	800-55 Rev. 2	PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security SP 800-55 Rev. 2 (Draft) PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security 9/24/2020 Status: Draft Download: None available	Draft	9/24/2020
SP	1800-15	Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 (Draft) Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 9/16/2020 Status: Draft Download: Draft SP 1800-15 (34 MB); Submit Comments on SP 1800-15; Project Homepage	Draft	9/16/2020
SP	1800-27	Securing Property Management Systems SP 1800-27 (Draft) Securing Property Management Systems 9/14/2020 Status: Draft Download: Draft SP 1800-27 volumes and Project Homepage; Submit Comments	Draft	9/14/2020
SP	800-46 Rev. 3	PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security SP 800-46 Rev. 3 (Draft) PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security 9/10/2020 Status: Draft Download: None available	Draft	9/10/2020
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways (Preliminary Draft) SP 1800-31 (Draft) Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways (Preliminary Draft) 9/10/2020 Status: Draft Download: Prelim. Draft SP 1800-31A; Submit Comments; Project homepage	Draft	9/10/2020
White Paper		Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management White Paper (Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management 9/08/2020 Status: Draft Download: White Paper (DOI); Local Download	Draft	9/08/2020
SP	800-172	Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 (Final Public Draft) SP 800-172 (Draft) Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 (Final Public Draft) 7/06/2020 Status: Draft Download: SP 800-172 (Draft) (DOI); Local Download; Comment template	Draft	7/06/2020
SP	800-63-4	PRE-DRAFT Call for Comments: Digital Identity Guidelines SP 800-63-4 (Draft) PRE-DRAFT Call for Comments: Digital Identity Guidelines 6/08/2020 Status: Draft Download: None available	Draft	6/08/2020
White Paper		Getting Ready for Post-Quantum Cryptography: Explore Challenges Associated with Adoption and Use of Post-Quantum Cryptographic Algorithms White Paper (Draft) Getting Ready for Post-Quantum Cryptography: Explore Challenges Associated with Adoption and Use of Post-Quantum Cryptographic Algorithms 5/26/2020 Status: Draft Download: White Paper (DOI); Local Download; NCCoE applied crypto agility project - Considerations for Migrating to PQC Algorithms; Post-Quantum Cryptography project	Draft	5/26/2020
White Paper		Hardware-Enabled Security for Server Platforms: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases White Paper (Draft) Hardware-Enabled Security for Server Platforms: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases 4/28/2020 Status: Draft Download: White Paper (DOI); Local Download	Draft	4/28/2020
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (Draft) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 4/13/2020 Status: Draft Download: SP 1800-19C (Prelim. Draft 1); Submit Comments on SP 1800-19C; SP 1800-19A (Prelim. Draft 1); SP 1800-19B (Prelim. Draft 1); Project Homepage	Draft	4/13/2020
White Paper		Methodology for Characterizing Network Behavior of Internet of Things Devices White Paper (Draft) Methodology for Characterizing Network Behavior of Internet of Things Devices 4/01/2020 Status: Draft Download: White Paper (DOI); Local Download; Submit Comments; Project homepage	Draft	4/01/2020
SP	800-124 Rev. 2	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 2 (Draft) Guidelines for Managing the Security of Mobile Devices in the Enterprise 3/24/2020 Status: Draft Download: SP 800-124 Rev. 2 (Draft) (DOI); Local Download	Draft	3/24/2020
NISTIR	8246	National Vulnerability Database (NVD) Metadata Submission Guidelines for Common Vulnerabilities and Exposures (CVE) Numbering Authorities (CNAs) and Authorized Data Publishers NISTIR 8246 (Draft) National Vulnerability Database (NVD) Metadata Submission Guidelines for Common Vulnerabilities and Exposures (CVE) Numbering Authorities (CNAs) and Authorized Data Publishers 2/10/2020 Status: Draft Download: NISTIR 8246 (Draft) (DOI); Local Download; Current Version of Table 3	Draft	2/10/2020
NISTIR	8276	Key Practices in Cyber Supply Chain Risk Management: Observations from Industry NISTIR 8276 (Draft) Key Practices in Cyber Supply Chain Risk Management: Observations from Industry 2/04/2020 Status: Draft Download: NISTIR 8276 (Draft) (DOI); Local Download; Cyber SCRM Key Practices and Case Studies; NIST news article	Draft	2/04/2020
SP	800-161 Rev. 1	PRE-DRAFT Call for Comments: Supply Chain Risk Management Practices for Federal Information Systems and Organizations SP 800-161 Rev. 1 (Draft) PRE-DRAFT Call for Comments: Supply Chain Risk Management Practices for Federal Information Systems and Organizations 2/04/2020 Status: Draft Download: None available	Draft	2/04/2020
SP	1800-26	Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events SP 1800-26 (Draft) Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 1/27/2020 Status: Draft Download: Draft SP 1800-26 volumes and Project Homepage	Draft	1/27/2020
SP	1800-25	Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events SP 1800-25 (Draft) Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 1/27/2020 Status: Draft Download: Draft SP 1800-25 volumes and Project Homepage	Draft	1/27/2020
FIPS	186-5	Digital Signature Standard (DSS) FIPS 186-5 (Draft) Digital Signature Standard (DSS) 10/31/2019 Status: Draft Download: FIPS 186-5 (Draft) (DOI); Local Download; Comments received on Draft FIPS 186-5	Draft	10/31/2019
SP	800-186	Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters SP 800-186 (Draft) Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters 10/31/2019 Status: Draft Download: SP 800-186 (Draft) (DOI); Local Download; Comments received on Draft SP 800-186	Draft	10/31/2019
NISTIR	8269	A Taxonomy and Terminology of Adversarial Machine Learning NISTIR 8269 (Draft) A Taxonomy and Terminology of Adversarial Machine Learning 10/30/2019 Status: Draft Download: NISTIR 8269 (Draft) (DOI); Local Download; Submit Comments; Project Homepage	Draft	10/30/2019
White Paper		[Project Description] Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) White Paper (Draft) [Project Description] Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) 10/08/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	10/08/2019
NISTIR	8267	Security Review of Consumer Home Internet of Things (IoT) Products NISTIR 8267 (Draft) Security Review of Consumer Home Internet of Things (IoT) Products 10/01/2019 Status: Draft Download: NISTIR 8267 (Draft) (DOI); Local Download; Submit Comments; Project Homepage	Draft	10/01/2019
SP	1800-24	Securing Picture Archiving and Communication System (PACS) SP 1800-24 (Draft) Securing Picture Archiving and Communication System (PACS) 9/16/2019 Status: Draft Download: Draft SP 1800-24 volumes and Project Homepage; Submit comments	Draft	9/16/2019
White Paper		[Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses White Paper (Draft) [Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/17/2019
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders (2nd Draft) SP 1800-13 (Draft) Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders (2nd Draft) 5/29/2019 Status: Draft Download: Second Draft SP 1800-13 volumes and Project Homepage; Submit Comments	Draft	5/29/2019
White Paper		An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning White Paper (Draft) An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning 5/22/2019 Status: Draft Download: Draft White Paper	Draft	5/22/2019
NISTIR	8213	A Reference for Randomness Beacons: Format and Protocol Version 2 NISTIR 8213 (Draft) A Reference for Randomness Beacons: Format and Protocol Version 2 5/06/2019 Status: Draft Download: NISTIR 8213 (Draft) (DOI); Local Download; NIST Randomness Beacon project	Draft	5/06/2019
SP	800-38G Rev. 1	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Rev. 1 (Draft) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 2/28/2019 Status: Draft Download: SP 800-38G Rev. 1 (Draft) (DOI); Local Download; Comments received; Letter of Assurance (from Voltage Security; since acquired by HP, Inc.); Block Cipher Techniques project	Draft	2/28/2019
White Paper		[Project Description] Security for IoT Sensor Networks: Building Management Case Study White Paper (Draft) [Project Description] Security for IoT Sensor Networks: Building Management Case Study 2/01/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	2/01/2019
SP	800-179 Rev. 1	Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Rev. 1 (Draft) Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist 10/19/2018 Status: Draft Download: Draft SP 800-179 Rev. 1; Comment template; Supplemental Content (GitHub)	Draft	10/19/2018
White Paper		Internet of Things (IoT) Trust Concerns White Paper (Draft) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Draft Download: IoT Trust Concerns (DRAFT)	Draft	10/17/2018
SP	1800-18	Privileged Account Management for the Financial Services Sector SP 1800-18 (Draft) Privileged Account Management for the Financial Services Sector 9/28/2018 Status: Draft Download: Draft SP 1800-18 volumes and Project Homepage; Submit Comments	Draft	9/28/2018
SP	800-71	Recommendation for Key Establishment Using Symmetric Block Ciphers SP 800-71 (Draft) Recommendation for Key Establishment Using Symmetric Block Ciphers 7/02/2018 Status: Draft Download: Draft SP 800-71	Draft	7/02/2018
White Paper		A Data Structure for Integrity Protection with Erasure Capability White Paper (Draft) A Data Structure for Integrity Protection with Erasure Capability 5/31/2018 Status: Draft Download: Block Matrix Draft	Draft	5/31/2018
White Paper		[Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry White Paper (Draft) [Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 1/16/2018 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	1/16/2018
NISTIR	8193	National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles NISTIR 8193 (Draft) National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles 11/08/2017 Status: Draft Download: Draft NISTIR 8193	Draft	11/08/2017
White Paper		[Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector White Paper (Draft) [Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector 10/12/2017 Status: Draft Download: Draft Project Description; Submit Comments; Project Homepage	Draft	10/12/2017
SP	1800-3	Attribute Based Access Control (2nd Draft) SP 1800-3 (Draft) Attribute Based Access Control (2nd Draft) 9/20/2017 Status: Draft Download: Draft SP 1800-3 volumes and Project Homepage; Submit Comments	Draft	9/20/2017
SP	1800-9	Access Rights Management for the Financial Services Sector SP 1800-9 (Draft) Access Rights Management for the Financial Services Sector 8/31/2017 Status: Draft Download: Draft 1800-9 volumes and homepage; Submit Comments; Learn more about this project	Draft	8/31/2017
NISTIR	8139	Identifying Uniformity with Entropy and Divergence NISTIR 8139 (Draft) Identifying Uniformity with Entropy and Divergence 2/02/2017 Status: Draft Download: Draft NISTIR 8139	Draft	2/02/2017
SP	800-188	De-Identifying Government Datasets (2nd Draft) SP 800-188 (Draft) De-Identifying Government Datasets (2nd Draft) 12/15/2016 Status: Draft Download: Draft SP 800-188; Comment Template	Draft	12/15/2016
NISTIR	8138	Vulnerability Description Ontology (VDO): a Framework for Characterizing Vulnerabilities NISTIR 8138 (Draft) Vulnerability Description Ontology (VDO): a Framework for Characterizing Vulnerabilities 9/30/2016 Status: Draft Download: Draft NISTIR 8138; Comment Template	Draft	9/30/2016
White Paper		[Project Description] Authentication for Law Enforcement Vehicle Systems White Paper (Draft) [Project Description] Authentication for Law Enforcement Vehicle Systems 9/13/2016 Status: Draft Download: Draft Project Description; Submit Comments; Project Homepage	Draft	9/13/2016
NISTIR	8144	Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue NISTIR 8144 (Draft) Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue 9/12/2016 Status: Draft Download: Draft NISTIR 8144; Mobile Threat Catalogue (GitHub); Press Release	Draft	9/12/2016
White Paper		[Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector White Paper (Draft) [Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector 5/09/2016 Status: Draft Download: Draft Project Description; Submit Comments; Project Homepage	Draft	5/09/2016
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (Draft) Recommendation for Random Bit Generator (RBG) Constructions 4/13/2016 Status: Draft Download: Second Draft SP 800-90C; Comment Template	Draft	4/13/2016
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (Draft) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Draft Download: Draft SP 800-154; Comment Template	Draft	3/14/2016
SP	800-180	NIST Definition of Microservices, Application Containers and System Virtual Machines SP 800-180 (Draft) NIST Definition of Microservices, Application Containers and System Virtual Machines 2/18/2016 Status: Draft Download: Draft SP 800-180; Comment Template	Draft	2/18/2016
NISTIR	8085	Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags NISTIR 8085 (Draft) Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags 12/17/2015 Status: Draft Download: Draft NISTIR 8085	Draft	12/17/2015
NISTIR	8058	Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content NISTIR 8058 (Draft) Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content 5/01/2015 Status: Draft Download: Draft NISTIR 8058	Draft	5/01/2015
NISTIR	8050	Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps NISTIR 8050 (Draft) Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps 4/02/2015 Status: Draft Download: Draft NISTIR 8050	Draft	4/02/2015
SP	800-85B-4	PIV Data Model Test Guidelines SP 800-85B-4 (Draft) PIV Data Model Test Guidelines 8/06/2014 Status: Draft Download: Draft SP 800-85B-4; Comment Template	Draft	8/06/2014
NISTIR	7924	Reference Certificate Policy (2nd Draft) NISTIR 7924 (Draft) Reference Certificate Policy (2nd Draft) 5/29/2014 Status: Draft Download: Second Draft NISTIR 7924; Comment Template	Draft	5/29/2014
NISTIR	7981	Mobile, PIV, and Authentication NISTIR 7981 (Draft) Mobile, PIV, and Authentication 3/07/2014 Status: Draft Download: Draft NISTIR 7981; Comment Template	Draft	3/07/2014
SP	800-164	Guidelines on Hardware-Rooted Security in Mobile Devices SP 800-164 (Draft) Guidelines on Hardware-Rooted Security in Mobile Devices 10/31/2012 Status: Draft Download: Draft SP 800-164	Draft	10/31/2012
SP	800-94 Rev. 1	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Rev. 1 (Draft) Guide to Intrusion Detection and Prevention Systems (IDPS) 7/25/2012 Status: Draft Download: Draft SP 800-94 Rev. 1	Draft	7/25/2012
NISTIR	7848	Specification for the Asset Summary Reporting Format 1.0 NISTIR 7848 (Draft) Specification for the Asset Summary Reporting Format 1.0 5/07/2012 Status: Draft Download: Draft NISTIR 7848	Draft	5/07/2012
NISTIR	7800	Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains NISTIR 7800 (Draft) Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains 1/20/2012 Status: Draft Download: Draft NISTIR 7800	Draft	1/20/2012
NISTIR	7799	Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications NISTIR 7799 (Draft) Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications 1/06/2012 Status: Draft Download: Draft NISTIR 7799	Draft	1/06/2012
NISTIR	7756	CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture NISTIR 7756 (Draft) CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture 1/06/2012 Status: Draft Download: Draft NISTIR 7756 (2nd public draft)	Draft	1/06/2012
SP	800-155	BIOS Integrity Measurement Guidelines SP 800-155 (Draft) BIOS Integrity Measurement Guidelines 12/08/2011 Status: Draft Download: Draft SP 800-155	Draft	12/08/2011

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs