Drafts Open for Comment

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Drafts Open for Comment

Feeds: RSS/Atom JSON

Many of NIST's cybersecurity and privacy publications are posted as drafts for public comment. Comment periods are still open for the following publications. Select the publication title to access downloads, related content, and instructions for submitting comments. Your thoughtful reviews and comments are greatly appreciated and help us to improve our standards and guidance.

Also see a complete list of public drafts that includes those whose comment periods have closed.

Showing 14 matching records.

Comments Due	Series	Number	Title Publications
03/31/2023	White Paper		Comments Due: 03/31/2023 [Project Description] Accelerate Adoption of Digital Identities on Mobile Devices: Identity Management White Paper (Draft) [Project Description] Accelerate Adoption of Digital Identities on Mobile Devices: Identity Management There are several new digital credentials-based standards emerging and they are all in silos operating in specific environments and written for specific contexts. And as such, there is a lack of foundational, strongly verifiable, and trustable digital credentials available to make transition t...
03/31/2023	SP	800-201	Comments Due: 03/31/2023 NIST Cloud Computing Forensic Reference Architecture SP 800-201 (Draft) NIST Cloud Computing Forensic Reference Architecture This document addresses the need to support a cloud system’s forensic readiness, which is the ability to quickly and effectively collect digital evidence with minimal investigation costs. The document presents a reference architecture to help users understand the forensic challenges that might ex...
04/03/2023	NISTIR	8432	Comments Due: 04/03/2023 Cybersecurity of Genomic Data NISTIR 8432 (Draft) Cybersecurity of Genomic Data Genomic data has enabled the rapid growth of the U.S. bioeconomy and is valuable to the individual, industry, and government due to intrinsic properties that, in combination, make it different from other types of high-value data which possess only a subset of these properties. The characteristics of...
04/07/2023	SP	800-223	Comments Due: 04/07/2023 High-Performance Computing (HPC) Security: Architecture, Threat Analysis, and Security Posture SP 800-223 (Draft) High-Performance Computing (HPC) Security: Architecture, Threat Analysis, and Security Posture Executive Order 13702 established the National Strategic Computing Initiative (NSCI) to maximize the benefits of high-performance computing (HPC) for economic competitiveness and scientific discovery. Securing HPC systems is challenging due to their size; performance requirements; diverse and comple...
04/10/2023	NISTIR	8320D	Comments Due: 04/10/2023 Hardware-Enabled Security: Hardware-Based Confidential Computing NISTIR 8320D (Draft) Hardware-Enabled Security: Hardware-Based Confidential Computing NISTIR 8320D is the latest in a series of reports on hardware-enabled security techniques and technologies. Organizations employ a growing volume of machine identities, often numbering in the thousands or millions per organization. Machine identities, such as secret cryptographic keys, can be use...
04/10/2023	NISTIR	8214C	Comments Due: 04/10/2023 NIST First Call for Multi-Party Threshold Schemes NISTIR 8214C (Draft) NIST First Call for Multi-Party Threshold Schemes NIST requests public comments on NIST IR 8214C ipd (initial public draft), NIST First Call for Multi-Party Threshold Schemes, for primitives organized into two categories: Cat1: selected NIST-specified primitives Cat2: other primitives not specified by NIST The report specifies the vari...
04/14/2023	SP	800-63-4	Comments Due: 04/14/2023 Digital Identity Guidelines SP 800-63-4 (Draft) Digital Identity Guidelines NIST requests comments on the draft fourth revision to the four-volume suite of Special Publication 800-63, Digital Identity Guidelines. This publication presents the process and technical requirements for meeting the digital identity management assurance levels specified in each volume. They also p...
04/14/2023	SP	800-63A-4	Comments Due: 04/14/2023 Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A-4 (Draft) Digital Identity Guidelines: Enrollment and Identity Proofing NIST requests comments on the draft fourth revision to the four-volume suite of Special Publication 800-63, Digital Identity Guidelines. This publication presents the process and technical requirements for meeting the digital identity management assurance levels specified in each volume. They also p...
04/14/2023	SP	800-63C-4	Comments Due: 04/14/2023 Digital Identity Guidelines: Federation and Assertions SP 800-63C-4 (Draft) Digital Identity Guidelines: Federation and Assertions NIST requests comments on the draft fourth revision to the four-volume suite of Special Publication 800-63, Digital Identity Guidelines. This publication presents the process and technical requirements for meeting the digital identity management assurance levels specified in each volume. They also p...
04/14/2023	SP	800-63B-4	Comments Due: 04/14/2023 Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B-4 (Draft) Digital Identity Guidelines: Authentication and Lifecycle Management NIST requests comments on the draft fourth revision to the four-volume suite of Special Publication 800-63, Digital Identity Guidelines. This publication presents the process and technical requirements for meeting the digital identity management assurance levels specified in each volume. They also p...
04/21/2023	SP	800-217	Comments Due: 04/21/2023 Guidelines for Personal Identity Verification (PIV) Federation SP 800-217 (Draft) Guidelines for Personal Identity Verification (PIV) Federation Summary This publication complements FIPS 201-3, which defines the requirements and characteristics of government-wide interoperable identity credentials used by federal employees and contractors. The draft guidelines in SP 800-217 provide technical requirements on the use of federated PIV i...
04/21/2023	SP	800-157 Rev. 1	Comments Due: 04/21/2023 Guidelines for Derived Personal Identity Verification (PIV) Credentials SP 800-157 Rev. 1 (Draft) Guidelines for Derived Personal Identity Verification (PIV) Credentials Summary This publication complements FIPS 201-3, which defines the requirements and characteristics of government-wide interoperable identity credentials used by federal employees and contractors. The draft guidelines in SP 800-157r1 detail the issuance and maintenance of authenticators used...
04/27/2023	SP	800-219 Rev. 1	Comments Due: 04/27/2023 Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 Rev. 1 (Draft) Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) This draft revision of NIST SP 800-219 provides resources that system administrators, security professionals, security policy authors, information security officers, and auditors can leverage to secure and assess macOS desktop and laptop system security in an automated way. This publication intro...
09/30/2023	White Paper	NIST AI 100-2e2023	Comments Due: 09/30/2023 Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations White Paper NIST AI 100-2e2023 (Draft) Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations This NIST report on artificial intelligence (AI) develops a taxonomy of attacks and mitigations and defines terminology in the field of adversarial machine learning (AML). Taken together, the taxonomy and terminology are meant to inform other standards and future practice guides for assessing and ma...

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs