Publications
IR 8322 (Final)
January 7, 2021
https://csrc.nist.gov/pubs/ir/8322/final
Abstract: This report summarizes the feedback received on the work of the NIST Cybersecurity for IoT program on device cybersecurity at a virtual workshop in July 2020. NISTIR 8259, Foundational Cybersecurity Activities for IoT Device Manufacturers and NISTIR 8259A, IoT Device Cybersecurity Capability Co...
Publications
SP 1800-24 (Final)
December 21, 2020
https://csrc.nist.gov/pubs/sp/1800/24/final
Abstract: Medical imaging plays an important role in diagnosing and treating patients. The system that manages medical images is known as the picture archiving communication system (PACS) and is nearly ubiquitous in healthcare environments. PACS is defined by the Food and Drug Administration (FDA) as a Class...
Publications
IR 8259C (Initial Public Draft)
December 15, 2020
https://csrc.nist.gov/pubs/ir/8259/c/ipd
Abstract: The core baseline in NISTIR 8259A, IoT Device Cybersecurity Capability Core Baseline and the non-technical baseline in NISTIR 8259B, IoT Manufacturer Non-Technical Supporting Capability Core Baseline can be expanded upon based on more specific contextual information. Using source material with infor...
Publications
SP 800-53 Rev. 5 (Final)
December 10, 2020
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final
Abstract: This publication provides a catalog of security and privacy controls for information systems and organizations to protect organizational operations and assets, individuals, other organizations, and the Nation from a diverse set of threats and risks, including hostile attacks, human errors, natural d...
Publications
SP 1800-26 (Final)
December 8, 2020
https://csrc.nist.gov/pubs/sp/1800/26/final
Abstract: Ransomware, destructive malware, insider threats, and even honest mistakes present an ongoing threat to organizations that manage data in various forms. Database records and structure, system files, configurations, user files, application code, and customer data are all potential targets of data cor...
Publications
SP 1800-25 (Final)
December 8, 2020
https://csrc.nist.gov/pubs/sp/1800/25/final
Abstract: Ransomware, destructive malware, insider threats, and even honest user mistakes present ongoing threats to organizations. Organizations’ data, such as database records, system files, configurations, user files, applications, and customer data, are all potential targets of data corruption, modificati...
Publications
IR 8278A (Final) (Withdrawn)
November 20, 2020
Withdrawn on February 26, 2024.
https://csrc.nist.gov/pubs/ir/8278/a/final
Abstract: The National Online Informative References (OLIR) Program is a NIST effort to facilitate subject matter experts in defining standardized Online Informative References (OLIRs), which are relationships between elements of their documents and elements of other documents like the NIST Cybersecurity Fram...
Publications
IR 8278 (Final) (Withdrawn)
November 20, 2020
Withdrawn on February 26, 2024.
https://csrc.nist.gov/pubs/ir/8278/final
Abstract: The National Online Informative References (OLIR) Program is a NIST effort to facilitate subject matter experts in defining standardized Online Informative References (OLIRs), which are relationships between elements of their documents and elements of other documents like the NIST Cybersecurity Fram...
Publications
IR 8330 (Final)
November 17, 2020
https://csrc.nist.gov/pubs/ir/8330/final
Abstract: Smart home technologies may expose adopters to increased risk to network security, information privacy, and physical safety. However, users may lack understanding of the privacy and security implications, while devices fail to provide transparency and configuration options. This results in little me...
Publications
SP 800-181 Rev. 1 (Final)
November 16, 2020
https://csrc.nist.gov/pubs/sp/800/181/r1/final
Abstract: This publication from the National Initiative for Cybersecurity Education (NICE) describes the Workforce Framework for Cybersecurity (NICE Framework), a fundamental reference for describing and sharing information about cybersecurity work. It expresses that work as Task statements and describes Know...
Publications
IR 8286 (Final) (Withdrawn)
October 13, 2020
Withdrawn on December 18, 2025.
https://csrc.nist.gov/pubs/ir/8286/final
Abstract: The increasing frequency, creativity, and severity of cybersecurity attacks means that all enterprises should ensure that cybersecurity risk is receiving appropriate attention within their enterprise risk management (ERM) programs. This document is intended to help individual organizations within an...
Events
October 7, 2020 - October 7, 2020
https://csrc.nist.gov/events/2020/considerations-in-migrating-to-pqc-algorithms
(Updated: Friday, September 18, 2020): This workshop was rescheduled from August 24 to Wednesday, October 7. Workshop Objectives The National Institute of Standards and Technology (NIST) will host a virtual workshop on Wednesday, October 7, 2020. The purpose of the workshop is to discuss the challenges and investigate the practical and implementable approaches to ease the migration from the current set of public key cryptographic algorithms to replacement algorithms that are resistant to quantum computer based attacks. This effort complements the NIST post-quantum cryptography (PQC)...
