Search CSRC

Cybersecurity Supply Chain Risk Management

Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)

Abstract: The macOS Security Compliance Project (mSCP) provides resources that system administrators, security professionals, security policy authors, information security officers, and auditors can leverage to secure and assess macOS desktop and laptop system security in an automated way. This publication in...

Submit Comments on Draft NIST SP 1800-34, Validating the Integrity of Computing Devices

The National Cybersecurity Center of Excellence (NCCoE) has released the initial public draft of NIST SP 1800-34, Validating the Integrity of Computing Devices. Comments are due July 25, 2022.

NIST IoT Cybersecurity Program Releases New Documents

The National Institute of Standards and Technology (NIST) Cybersecurity for the Internet of Things (IoT) program has released two new documents.

Lessons Learned and Suitability of Focus Groups in Security Information Workers Research

Conference: 4th International Conference on HCI for Cybersecurity, Privacy, and Trust Abstract: Security information workers (SIW) are professionals who develop and use security-related data within their jobs. Qualitative methods – primarily interviews – are becoming increasingly popular in SIW research. However, focus groups are an under-utilized, but potentially valuable way to explore the w...

Ordered t-way Combinations for Testing State-based Systems: NIST releases Cybersecurity White Paper 26

NIST releases NIST Cybersecurity White Paper 26, Ordered t-way Combinations for Testing State-based Systems.

Open for Public Comment: Preliminary Draft Practice Guide (SP 1800-35 Vol. A)

The Zero Trust Architecture (ZTA) team at NIST's National Cybersecurity Center of Excellence (NCCoE) has published volume A of a preliminary draft practice guide titled "Implementing a Zero Trust Architecture". The deadline to submit comments is July 5, 2022.

Key Device Cybersecurity Requirement

Information Relevant to Cybersecurity

Smart Grid Cybersecurity Committee

SGCC

NIST Cybersecurity Framework Core

NIST Framework for Improving Critical Infrastructure Cybersecurity

NICE

NCCIC

NCCoE

NCEP

National Initiative for Cybersecurity Education

National Centers of Academic Excellence in Cybersecurity

National Cybersecurity and Communications Integration Center

National Cybersecurity Center of Excellence

National Cybersecurity Excellence Partnership

Device Cybersecurity Capability

Device Cybersecurity Capability Core Baseline

Degraded Cybersecurity State