Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 92 matching records.

Series	Number	Title Publications	Status	Release Date
SP	1800-34	Validating the Integrity of Computing Devices (Preliminary Draft) SP 1800-34 (Draft) Validating the Integrity of Computing Devices (Preliminary Draft) 11/22/2021 Status: Draft Download: SP 1800-34C (Prelim. Draft); Project homepage; SP 1800-34B (Prelim. Draft); SP 1800-34A (Prelim. Draft)	Draft	11/22/2021
SP	800-40 Rev. 4	Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology SP 800-40 Rev. 4 (Draft) Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology 11/17/2021 Status: Draft Download: SP 800-40 Rev. 4 (Draft) (DOI); Local Download	Draft	11/17/2021
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 (Draft) Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 11/17/2021 Status: Draft Download: Draft SP 1800-31; Project homepage	Draft	11/17/2021
White Paper		Baseline Criteria for Consumer Software Cybersecurity Labeling White Paper (Draft) Baseline Criteria for Consumer Software Cybersecurity Labeling 11/01/2021 Status: Draft Download: Draft Baseline Criteria; Consumer Software Criteria page; NIST news article	Draft	11/01/2021
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations (2nd Draft) SP 800-161 Rev. 1 (Draft) Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations (2nd Draft) 10/28/2021 Status: Draft Download: SP 800-161 Rev. 1 (Draft) (DOI); Local Download; Comment template; NIST’s Cyber Supply Chain Risk Management Program	Draft	10/28/2021
NISTIR	8320	Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases (2nd Draft) NISTIR 8320 (Draft) Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases (2nd Draft) 10/27/2021 Status: Draft Download: NISTIR 8320 (Draft) (DOI); Local Download	Draft	10/27/2021
NISTIR	8320B	Hardware-Enabled Security: Policy Based Governance in Trusted Container Platforms NISTIR 8320B (Draft) Hardware-Enabled Security: Policy Based Governance in Trusted Container Platforms 10/27/2021 Status: Draft Download: NISTIR 8320B (Draft) (DOI); Local Download	Draft	10/27/2021
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (Draft) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 10/27/2021 Status: Draft Download: Draft SP 1800-19; Project homepage	Draft	10/27/2021
SP	800-108 Rev. 1	Recommendation for Key Derivation Using Pseudorandom Functions SP 800-108 Rev. 1 (Draft) Recommendation for Key Derivation Using Pseudorandom Functions 10/18/2021 Status: Draft Download: SP 800-108 Rev. 1 (Draft) (DOI); Local Download	Draft	10/18/2021
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 (Draft) Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 9/30/2021 Status: Draft Download: SP 800-218 (Draft) (DOI); Local Download; SSDF Project homepage	Draft	9/30/2021
SP	800-204C	Implementation of DevSecOps for a Microservices-based Application with Service Mesh SP 800-204C (Draft) Implementation of DevSecOps for a Microservices-based Application with Service Mesh 9/29/2021 Status: Draft Download: SP 800-204C (Draft) (DOI); Local Download	Draft	9/29/2021
SP	1800-10	Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector SP 1800-10 (Draft) Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector 9/23/2021 Status: Draft Download: Draft SP 1800-10; Project homepage	Draft	9/23/2021
SP	800-50 Rev. 1	PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program SP 800-50 Rev. 1 (Draft) PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program 9/21/2021 Status: Draft Download: None available	Draft	9/21/2021
SP	1800-32	Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources SP 1800-32 (Draft) Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 9/21/2021 Status: Draft Download: Draft SP 1800-32 files; Project homepage	Draft	9/21/2021
NISTIR	8374	Cybersecurity Framework Profile for Ransomware Risk Management NISTIR 8374 (Draft) Cybersecurity Framework Profile for Ransomware Risk Management 9/08/2021 Status: Draft Download: NISTIR 8374 (Draft) (DOI); Local Download	Draft	9/08/2021
NISTIR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management NISTIR 8286B (Draft) Prioritizing Cybersecurity Risk for Enterprise Risk Management 9/01/2021 Status: Draft Download: NISTIR 8286B (Draft) (DOI); Local Download; See NISTIR 8286 Supplemental Material	Draft	9/01/2021
White Paper		[Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector White Paper (Draft) [Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector 8/31/2021 Status: Draft Download: Draft Project Description; Project homepage	Draft	8/31/2021
SP	800-140F Rev. 1	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F Rev. 1 (Draft) CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft Download: SP 800-140F Rev. 1 (Draft) (DOI); Local Download; Comment template	Draft	8/20/2021
SP	800-140D Rev. 1	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 1 (Draft) CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft Download: SP 800-140D Rev. 1 (Draft) (DOI); Local Download; Comments template	Draft	8/20/2021
SP	800-140C Rev. 1	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 1 (Draft) CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft Download: SP 800-140C Rev. 1 (Draft) (DOI); Local Download; Comment template	Draft	8/20/2021
SP	800-160 Vol. 2 Rev. 1	Developing Cyber-Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 Rev. 1 (Draft) Developing Cyber-Resilient Systems: A Systems Security Engineering Approach 8/05/2021 Status: Draft Download: SP 800-160 Vol. 2 Rev. 1 (Draft) (DOI); Local Download; Systems Security Engineering (SSE) Project	Draft	8/05/2021
White Paper		Planning for a Zero Trust Architecture: A Starting Guide for Administrators White Paper (Draft) Planning for a Zero Trust Architecture: A Starting Guide for Administrators 8/04/2021 Status: Draft Download: White Paper (DOI); Local Download	Draft	8/04/2021
SP	800-53A Rev. 5	Assessing Security and Privacy Controls in Information Systems and Organizations SP 800-53A Rev. 5 (Draft) Assessing Security and Privacy Controls in Information Systems and Organizations 8/03/2021 Status: Draft Download: SP 800-53A Rev. 5 (Draft) (DOI); Local Download; Comment template; [Plain Text] Assessment Procedures; [CSV] README for CSV file of Assessment Procedures; [CSV] Assessment Procedures; [OSCAL] oscal-content GitHub repo	Draft	8/03/2021
NISTIR	8270	Introduction to Cybersecurity for Commercial Satellite Operations NISTIR 8270 (Draft) Introduction to Cybersecurity for Commercial Satellite Operations 6/29/2021 Status: Draft Download: NISTIR 8270 (Draft) (DOI); Local Download	Draft	6/29/2021
White Paper		Combinatorial Coverage Difference Measurement White Paper (Draft) Combinatorial Coverage Difference Measurement 6/22/2021 Status: Draft Download: White Paper (DOI); Local Download	Draft	6/22/2021
NISTIR	8335	Identity as a Service for Public Safety Organizations NISTIR 8335 (Draft) Identity as a Service for Public Safety Organizations 6/16/2021 Status: Draft Download: NISTIR 8335 (Draft) (DOI); Local Download; Project homepage	Draft	6/16/2021
NISTIR	8336	Background on Identity Federation Technologies for the Public Safety Community NISTIR 8336 (Draft) Background on Identity Federation Technologies for the Public Safety Community 6/09/2021 Status: Draft Download: NISTIR 8336 (Draft) (DOI); Local Download; Project homepage	Draft	6/09/2021
SP	800-216	Recommendations for Federal Vulnerability Disclosure Guidelines SP 800-216 (Draft) Recommendations for Federal Vulnerability Disclosure Guidelines 6/07/2021 Status: Draft Download: SP 800-216 (Draft) (DOI); Local Download; Comment template	Draft	6/07/2021
NISTIR	8334	Using Mobile Device Biometrics for Authenticating First Responders NISTIR 8334 (Draft) Using Mobile Device Biometrics for Authenticating First Responders 6/02/2021 Status: Draft Download: NISTIR 8334 (Draft) (DOI); Local Download; Project homepage	Draft	6/02/2021
White Paper		Establishing Confidence in IoT Device Security: How do we get there? White Paper (Draft) Establishing Confidence in IoT Device Security: How do we get there? 5/14/2021 Status: Draft Download: White Paper (DOI); Local Download; NIST Cybersecurity for IoT Program	Draft	5/14/2021
SP	1800-30	Securing Telehealth Remote Patient Monitoring Ecosystem (2nd Draft) SP 1800-30 (Draft) Securing Telehealth Remote Patient Monitoring Ecosystem (2nd Draft) 5/06/2021 Status: Draft Download: Second Draft SP 1800-30 files	Draft	5/06/2021
SP	800-66 Rev. 2	PRE-DRAFT Call for Comments: Implementing the HIPAA Security Rule SP 800-66 Rev. 2 (Draft) PRE-DRAFT Call for Comments: Implementing the HIPAA Security Rule 4/29/2021 Status: Draft Download: None available	Draft	4/29/2021
SP	800-172A	Assessing Enhanced Security Requirements for Controlled Unclassified Information SP 800-172A (Draft) Assessing Enhanced Security Requirements for Controlled Unclassified Information 4/27/2021 Status: Draft Download: SP 800-172A (Draft) (DOI); Local Download; Comment template	Draft	4/27/2021
SP	800-82 Rev. 3	PRE-DRAFT Call for Comments: Guide to Industrial Control Systems (ICS) Security SP 800-82 Rev. 3 (Draft) PRE-DRAFT Call for Comments: Guide to Industrial Control Systems (ICS) Security 4/23/2021 Status: Draft Download: None available	Draft	4/23/2021
NISTIR	8356	Considerations for Digital Twin Technology and Emerging Standards NISTIR 8356 (Draft) Considerations for Digital Twin Technology and Emerging Standards 4/16/2021 Status: Draft Download: NISTIR 8356 (Draft) (DOI); Local Download	Draft	4/16/2021
NISTIR	8310	Cybersecurity Framework Election Infrastructure Profile NISTIR 8310 (Draft) Cybersecurity Framework Election Infrastructure Profile 3/29/2021 Status: Draft Download: NISTIR 8310 (Draft) (DOI); Local Download; Comment template; NIST News article	Draft	3/29/2021
SP	1800-22	Mobile Device Security: Bring Your Own Device (BYOD) SP 1800-22 (Draft) Mobile Device Security: Bring Your Own Device (BYOD) 3/18/2021 Status: Draft Download: Draft SP 1800-22 files	Draft	3/18/2021
NISTIR	8355	NICE Framework Competencies: Assessing Learners for Cybersecurity Work NISTIR 8355 (Draft) NICE Framework Competencies: Assessing Learners for Cybersecurity Work 3/17/2021 Status: Draft Download: NISTIR 8355 (Draft) (DOI); Local Download; List of Competencies (draft); NICE Framework site	Draft	3/17/2021
NISTIR	8344	Ontology for Authentication NISTIR 8344 (Draft) Ontology for Authentication 2/08/2021 Status: Draft Download: NISTIR 8344 (Draft) (DOI); Local Download	Draft	2/08/2021
SP	1800-33	5G Cybersecurity (Preliminary Draft) SP 1800-33 (Draft) 5G Cybersecurity (Preliminary Draft) 2/01/2021 Status: Draft Download: Prelim. Draft SP 1800-33A	Draft	2/01/2021
White Paper		Toward a PEC Use-Case Suite (Preliminary Draft) White Paper (Draft) Toward a PEC Use-Case Suite (Preliminary Draft) 1/21/2021 Status: Draft Download: Preliminary Draft; Comment template; Privacy-Enhancing Cryptography - suite	Draft	1/21/2021
NISTIR	8259C	Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline NISTIR 8259C (Draft) Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline 12/15/2020 Status: Draft Download: NISTIR 8259C (Draft) (DOI); Local Download	Draft	12/15/2020
FIPS	201-3	Personal Identity Verification (PIV) of Federal Employees and Contractors FIPS 201-3 (Draft) Personal Identity Verification (PIV) of Federal Employees and Contractors 11/02/2020 Status: Draft Download: FIPS 201-3 (Draft) (DOI); Local Download; Web-based publication; GitHub: review and comment; Comment template; Posted comments; Federal Register Notice; FIPS 201-3 Virtual Workshop (Dec. 9)	Draft	11/02/2020
White Paper		Securing Data Integrity Against Ransomware Attacks: Using the NIST Cybersecurity Framework and NIST Cybersecurity Practice Guides White Paper (Draft) Securing Data Integrity Against Ransomware Attacks: Using the NIST Cybersecurity Framework and NIST Cybersecurity Practice Guides 10/01/2020 Status: Draft Download: White Paper (DOI); Local Download; Project homepage	Draft	10/01/2020
NISTIR	8235	Security Guidance for First Responder Mobile and Wearable Devices NISTIR 8235 (Draft) Security Guidance for First Responder Mobile and Wearable Devices 9/28/2020 Status: Draft Download: NISTIR 8235 (Draft) (DOI); Local Download	Draft	9/28/2020
SP	800-55 Rev. 2	PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security SP 800-55 Rev. 2 (Draft) PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security 9/24/2020 Status: Draft Download: None available	Draft	9/24/2020
SP	800-46 Rev. 3	PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security SP 800-46 Rev. 3 (Draft) PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security 9/10/2020 Status: Draft Download: None available	Draft	9/10/2020
White Paper		Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management White Paper (Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management 9/08/2020 Status: Draft Download: White Paper (DOI); Local Download	Draft	9/08/2020
SP	800-63-4	PRE-DRAFT Call for Comments: Digital Identity Guidelines SP 800-63-4 (Draft) PRE-DRAFT Call for Comments: Digital Identity Guidelines 6/08/2020 Status: Draft Download: None available	Draft	6/08/2020
White Paper		Methodology for Characterizing Network Behavior of Internet of Things Devices White Paper (Draft) Methodology for Characterizing Network Behavior of Internet of Things Devices 4/01/2020 Status: Draft Download: White Paper (DOI); Local Download; Project homepage	Draft	4/01/2020
SP	800-124 Rev. 2	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 2 (Draft) Guidelines for Managing the Security of Mobile Devices in the Enterprise 3/24/2020 Status: Draft Download: SP 800-124 Rev. 2 (Draft) (DOI); Local Download	Draft	3/24/2020
FIPS	186-5	Digital Signature Standard (DSS) FIPS 186-5 (Draft) Digital Signature Standard (DSS) 10/31/2019 Status: Draft Download: FIPS 186-5 (Draft) (DOI); Local Download; Comments received on Draft FIPS 186-5	Draft	10/31/2019
SP	800-186	Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters SP 800-186 (Draft) Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters 10/31/2019 Status: Draft Download: SP 800-186 (Draft) (DOI); Local Download; Comments received on Draft SP 800-186	Draft	10/31/2019
NISTIR	8269	A Taxonomy and Terminology of Adversarial Machine Learning NISTIR 8269 (Draft) A Taxonomy and Terminology of Adversarial Machine Learning 10/30/2019 Status: Draft Download: NISTIR 8269 (Draft) (DOI); Local Download; Project Homepage	Draft	10/30/2019
White Paper		[Project Description] Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) White Paper (Draft) [Project Description] Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) 10/08/2019 Status: Draft Download: Project Description	Draft	10/08/2019
NISTIR	8267	Security Review of Consumer Home Internet of Things (IoT) Products NISTIR 8267 (Draft) Security Review of Consumer Home Internet of Things (IoT) Products 10/01/2019 Status: Draft Download: NISTIR 8267 (Draft) (DOI); Local Download	Draft	10/01/2019
White Paper		[Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses White Paper (Draft) [Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft Download: Project Description	Draft	6/17/2019
White Paper		An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning White Paper (Draft) An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning 5/22/2019 Status: Draft Download: Draft White Paper	Draft	5/22/2019
NISTIR	8213	A Reference for Randomness Beacons: Format and Protocol Version 2 NISTIR 8213 (Draft) A Reference for Randomness Beacons: Format and Protocol Version 2 5/06/2019 Status: Draft Download: NISTIR 8213 (Draft) (DOI); Local Download; NIST Randomness Beacon project	Draft	5/06/2019
SP	800-38G Rev. 1	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Rev. 1 (Draft) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 2/28/2019 Status: Draft Download: SP 800-38G Rev. 1 (Draft) (DOI); Local Download; Comments received; Letter of Assurance (from Voltage Security; since acquired by HP, Inc.); Block Cipher Techniques project	Draft	2/28/2019
White Paper		[Project Description] Security for IoT Sensor Networks: Building Management Case Study White Paper (Draft) [Project Description] Security for IoT Sensor Networks: Building Management Case Study 2/01/2019 Status: Draft Download: Project Description	Draft	2/01/2019
SP	800-179 Rev. 1	Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Rev. 1 (Draft) Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist 10/19/2018 Status: Draft Download: Draft SP 800-179 Rev. 1; Comment template; Supplemental Content (GitHub)	Draft	10/19/2018
White Paper		Internet of Things (IoT) Trust Concerns White Paper (Draft) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Draft Download: IoT Trust Concerns (DRAFT)	Draft	10/17/2018
SP	1800-18	Privileged Account Management for the Financial Services Sector SP 1800-18 (Draft) Privileged Account Management for the Financial Services Sector 9/28/2018 Status: Draft Download: Draft SP 1800-18 files	Draft	9/28/2018
SP	800-71	Recommendation for Key Establishment Using Symmetric Block Ciphers SP 800-71 (Draft) Recommendation for Key Establishment Using Symmetric Block Ciphers 7/02/2018 Status: Draft Download: Draft SP 800-71	Draft	7/02/2018
White Paper		A Data Structure for Integrity Protection with Erasure Capability White Paper (Draft) A Data Structure for Integrity Protection with Erasure Capability 5/31/2018 Status: Draft Download: Block Matrix Draft	Draft	5/31/2018
NISTIR	8193	National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles NISTIR 8193 (Draft) National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles 11/08/2017 Status: Draft Download: Draft NISTIR 8193	Draft	11/08/2017
White Paper		[Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector White Paper (Draft) [Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector 10/12/2017 Status: Draft Download: Draft Project Description; Project homepage	Draft	10/12/2017
SP	1800-3	Attribute Based Access Control (2nd Draft) SP 1800-3 (Draft) Attribute Based Access Control (2nd Draft) 9/20/2017 Status: Draft Download: Second Draft SP 1800-3 files	Draft	9/20/2017
SP	1800-9	Access Rights Management for the Financial Services Sector SP 1800-9 (Draft) Access Rights Management for the Financial Services Sector 8/31/2017 Status: Draft Download: Draft 1800-9 files; NCCoE news	Draft	8/31/2017
NISTIR	8139	Identifying Uniformity with Entropy and Divergence NISTIR 8139 (Draft) Identifying Uniformity with Entropy and Divergence 2/02/2017 Status: Draft Download: Draft NISTIR 8139	Draft	2/02/2017
SP	800-188	De-Identifying Government Datasets (2nd Draft) SP 800-188 (Draft) De-Identifying Government Datasets (2nd Draft) 12/15/2016 Status: Draft Download: Draft SP 800-188; Comment Template	Draft	12/15/2016
NISTIR	8138	Vulnerability Description Ontology (VDO): a Framework for Characterizing Vulnerabilities NISTIR 8138 (Draft) Vulnerability Description Ontology (VDO): a Framework for Characterizing Vulnerabilities 9/30/2016 Status: Draft Download: Draft NISTIR 8138; Comment Template	Draft	9/30/2016
White Paper		[Project Description] Authentication for Law Enforcement Vehicle Systems White Paper (Draft) [Project Description] Authentication for Law Enforcement Vehicle Systems 9/13/2016 Status: Draft Download: Draft Project Description	Draft	9/13/2016
NISTIR	8144	Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue NISTIR 8144 (Draft) Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue 9/12/2016 Status: Draft Download: Draft NISTIR 8144; Mobile Threat Catalogue (GitHub); Press Release	Draft	9/12/2016
White Paper		[Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector White Paper (Draft) [Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector 5/09/2016 Status: Draft Download: Draft Project Description	Draft	5/09/2016
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (Draft) Recommendation for Random Bit Generator (RBG) Constructions 4/13/2016 Status: Draft Download: Second Draft SP 800-90C; Comment Template	Draft	4/13/2016
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (Draft) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Draft Download: Draft SP 800-154; Comment Template	Draft	3/14/2016
SP	800-180	NIST Definition of Microservices, Application Containers and System Virtual Machines SP 800-180 (Draft) NIST Definition of Microservices, Application Containers and System Virtual Machines 2/18/2016 Status: Draft Download: Draft SP 800-180; Comment Template	Draft	2/18/2016
NISTIR	8085	Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags NISTIR 8085 (Draft) Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags 12/17/2015 Status: Draft Download: Draft NISTIR 8085	Draft	12/17/2015
NISTIR	8058	Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content NISTIR 8058 (Draft) Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content 5/01/2015 Status: Draft Download: Draft NISTIR 8058	Draft	5/01/2015
NISTIR	8050	Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps NISTIR 8050 (Draft) Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps 4/02/2015 Status: Draft Download: Draft NISTIR 8050	Draft	4/02/2015
SP	800-85B-4	PIV Data Model Test Guidelines SP 800-85B-4 (Draft) PIV Data Model Test Guidelines 8/06/2014 Status: Draft Download: Draft SP 800-85B-4; Comment Template	Draft	8/06/2014
NISTIR	7924	Reference Certificate Policy (2nd Draft) NISTIR 7924 (Draft) Reference Certificate Policy (2nd Draft) 5/29/2014 Status: Draft Download: Second Draft NISTIR 7924; Comment Template	Draft	5/29/2014
SP	800-16 Rev. 1	A Role-Based Model for Federal Information Technology/Cybersecurity Training (3rd Draft) SP 800-16 Rev. 1 (Draft) A Role-Based Model for Federal Information Technology/Cybersecurity Training (3rd Draft) 3/14/2014 Status: Draft Download: Draft SP 800-16 Rev. 1 (3rd draft)	Draft	3/14/2014
SP	800-164	Guidelines on Hardware-Rooted Security in Mobile Devices SP 800-164 (Draft) Guidelines on Hardware-Rooted Security in Mobile Devices 10/31/2012 Status: Draft Download: Draft SP 800-164	Draft	10/31/2012
SP	800-94 Rev. 1	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Rev. 1 (Draft) Guide to Intrusion Detection and Prevention Systems (IDPS) 7/25/2012 Status: Draft Download: Draft SP 800-94 Rev. 1	Draft	7/25/2012
NISTIR	7848	Specification for the Asset Summary Reporting Format 1.0 NISTIR 7848 (Draft) Specification for the Asset Summary Reporting Format 1.0 5/07/2012 Status: Draft Download: Draft NISTIR 7848	Draft	5/07/2012
NISTIR	7800	Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains NISTIR 7800 (Draft) Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains 1/20/2012 Status: Draft Download: Draft NISTIR 7800	Draft	1/20/2012
NISTIR	7756	CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture NISTIR 7756 (Draft) CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture 1/06/2012 Status: Draft Download: Draft NISTIR 7756 (2nd public draft)	Draft	1/06/2012
NISTIR	7799	Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications NISTIR 7799 (Draft) Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications 1/06/2012 Status: Draft Download: Draft NISTIR 7799	Draft	1/06/2012
SP	800-155	BIOS Integrity Measurement Guidelines SP 800-155 (Draft) BIOS Integrity Measurement Guidelines 12/08/2011 Status: Draft Download: Draft SP 800-155	Draft	12/08/2011

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs