Search CSRC

Common Platform Enumeration (CPE) is a standardized method of describing and identifying classes of applications, operating systems, and hardware devices present among an enterprise's computing assets. CPE does not identify unique instantiations of products on systems, such as the installation of XYZ Visualizer Enterprise Suite 4.2.3 with serial number Q472B987P113. Rather, CPE identifies abstract classes of products, such as XYZ Visualizer Enterprise Suite 4.2.3, XYZ Visualizer Enterprise Suite (all versions), or XYZ Visualizer (all variations). IT management tools can collect information...

Type: Poster

Type: Presentation

Type: Presentation

Type: Presentation

Type: Presentation

Day 1: FIPS 201 MANDATES Day 2: Implementation Schedule Presentations Requirements of Personal Identity Verification Standards and HSPD#12: OVERVIEW Federal Information Processing Standard (FIPS) 201, Personal Identity, Verification for Federal Employees and Contractors: Control Objectives Donna Dodson, NIST 2005 Security Industry Association: FIPS 201 Topology Standards on Steroids FIPS 201 Teresa Schwarzhoff, NIST Special Publication 800-73: Interfaces for Personal Identity Verification Jim Dray, NIST Certification and Accreditation of PIV Card Issuing Organizations Joan...

This one-day workshop addressed software security and the Draft FIPS 140-3 specification (July 2007 draft).

(All presentations in .pdf format unless otherwise specified.) Federal Register Notice Announcing Meeting Minutes Wednesday, December 3, 2008 OMB Update Mike Howell, OMB NRC CSTB Report Briefing Herb Lin, NRC CSTB Thursday, December 4, 2008 ISC2 Software Credentialing Lynn McNulty, Board Member Howard Schmidt, Board Member Metrics & FISMA 08 Board Discussion with GAO Gregory Wilshusen, GAO SCADA Security Sean McGurk, Director of Control Systems Security Program, DHS Lynn McNulty, Board Member Threat Analysis, IC to Civilian Matt Stern, GenDynamics Program Manager to USCERT...

(All presentations in .pdf format.) Federal Register Notice Announcing Meeting Minutes SP 800-53 Appendix on Privacy Ron Ross, NIST Fellow Erika McCallister, Computer Scientist, NIST Martha Landesberg, Associate Director, Privacy Policy, Privacy Office, DHS Roanne Shaddox, Sr. Privacy Specialist, FDIC Cyber Awareness Month – Updates and Report Bill Newhouse, Cybersecurity Advisor, NIST FCC and Technology Robert Naylor, Chief Information Officer, Office of the Managing Director, Federal Communications Commission HSPD‐12 and Open Identity Initiative Carol A. Bales, OMB Lisa A. Schlosser,...

Abstract: This bulletin summarizes the information presented in NIST Special Publication (SP) 800-82, Guide to Industrial Control Systems Security: Recommendations of the National Institute of Standards and Technology. The publication was written by Keith Stouffer and by Joe Falco of NIST, and by Karen Scarfo...

The NIST National Cybersecurity Center of Excellence (NCCoE) has released the initial public draft Cybersecurity White Paper (CSWP) 36G, False Base Station: Applying 5G Cybersecurity and Privacy Capabilities. It details how the availability of inexpensive, off-the-shelf hardware and software tools allows attackers to mimic legitimate carrier equipment to intercept and disrupt cellular communications.

NIST IR 8613 ipd, Multi-Cloud Architecture Challenges, identifies, categorizes, and analyzes the security and compliance challenges that are unique to or significantly amplified by multi-cloud architectures. This analysis addresses security and ATO challenges and highlights areas where additional community research could meaningfully reduce risk.

NIST IR 8374r1, "Ransomware Risk Management: A Cybersecurity Framework (CSF) 2.0 Community Profile," is now available.

NIST Interagency Report (NIST IR) 8320E ipd (initial public draft), Hardware-Enabled Security: Confidential Computing of Data in Cloud Workloads, is open for public comment through July 13, 2026.

NIST is pleased to release the initial public draft of Internal Report (IR) 8588, A Community-Driven Differential Privacy Deployment Registry. The public comment period is open through December 5, 2025.

NIST's NCCoE has posted the second public draft of NIST IR 8536, "Supply Chain Traceability: Manufacturing Meta-Framework," for public comment. The comment period is open through October 3, 2025.

NIST has released Internal Report (IR) 8557 for the Virtual Workshop on Usable Cybersecurity and Privacy for Immersive Technologies

Initial Public Draft (IPD) NIST IR 8480, Attribute Validation Services for Identity Management, is available for public comment through Monday, December 2, 2024.

NIST has released the initial public draft of Interagency Report (IR) 8532, Workshop on Enhancing Security of Devices and Components Across the Supply Chain. The comment period closes September 16, 2024.

The NIST Risk Management Framework Small Enterprise Quick Start Guide is designed to help small, under-resourced entities understand the value and core components of the RMF.

NIST Internal Report (NIST IR) 8355, NICE Framework Competencies: Preparing a Job-Ready Cybersecurity Workforce, has been published. This publication describes Competency Areas as included in the NICE Framework, providing information on how Competency Areas are defined and how they can be used.

The National Cybersecurity Center of Excellence (NCCoE) has released for public comment a draft of NIST Internal Report (NISTIR) 8467, Cybersecurity Framework Profile for Genomic Data. The comment period is now open through July 17, 2023.

NIST has published a new Cybersecurity White Paper on "Security Segmentation in a Small Manufacturing Environment."

NIST is requesting additional digital signature scheme proposals to be considered in the PQC standardization process.