Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 8170

Approaches for Federal Agencies to Use the Cybersecurity Framework

Date Published: March 2020


Matthew Barrett (NIST), Jeffrey Marron (NIST), Victoria Pillitteri (NIST), Jon Boyens (NIST), Stephen Quinn (NIST), Gregory Witte (Huntington Ingalls Industries), Larry Feldman (Huntington Ingalls Industries)



Cybersecurity Framework; Enterprise Risk Management; Federal Information Security Management Act (FISMA); Risk Management Framework (RMF); security and privacy controls
Control Families

None selected


Download URL

Supplemental Material:
Cybersecurity Framework homepage

Document History:
05/12/17: IR 8170 (Draft)
03/19/20: IR 8170 (Final)