Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 8170

Approaches for Federal Agencies to Use the Cybersecurity Framework

Date Published: March 2020 (includes updates as of August 17, 2021)

Supersedes: IR 8170 (03/19/2020)

Author(s)

Matthew Barrett (NIST), Jeffrey Marron (NIST), Victoria Pillitteri (NIST), Jon Boyens (NIST), Stephen Quinn (NIST), Gregory Witte (Huntington Ingalls Industries), Larry Feldman (Huntington Ingalls Industries)

Abstract

Keywords

Cybersecurity Framework; Enterprise Risk Management; Federal Information Security Management Act (FISMA); Risk Management Framework (RMF); security and privacy controls
Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.IR.8170-upd
Download URL

Supplemental Material:
Cybersecurity Framework homepage

Related NIST Publications:
IR 8286
CSWP 6
SP 800-53 Rev. 4

Document History:
08/17/21: IR 8170 (Final)