Search Results

Data Classification Practices: Final Project Description Released

July 22, 2021
https://csrc.nist.gov/news/2021/data-classification-practices-final-pd

NIST's National Cybersecurity Center of Excellence has released a final Project Description on data classification practices.

Project Description (Final)

Data Classification Practices: Facilitating Data-Centric Security Management

July 22, 2021
https://csrc.nist.gov/pubs/pd/2021/07/22/data-classification-practices-datacentric-security/final

Abstract: As part of a zero trust approach, data-centric security management aims to enhance protection of information (data) regardless of where the data resides or who it is shared with. Data-centric security management necessarily depends on organizations knowing what data they have, what its cha...

Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management: 2nd Public Draft of NISTIR 8286A Available for Comment

July 6, 2021
https://csrc.nist.gov/news/2021/identifying-estimating-cybersecurity-risk-for-erm

A second public draft of NISTIR 8286A is available: "Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management." The comment period is open through August 6, 2021.

Journal Article (Final)

Cybersecurity Advocates: Force Multipliers in Security Behavior Change

July 5, 2021
https://csrc.nist.gov/pubs/journal/2021/07/cybersecurity-advocates-force-multipliers-in-secur/final

Journal: IEEE Security & Privacy Abstract: Cybersecurity advocates motivate individuals and organizations to adopt positive security behaviors. Based on our research, we describe qualities of successful advocates. Our findings have practical implications for expanding the cybersecurity workforce by recruiting and developing professionals who...

Conference Paper (Final)

Scaling the Phish: Advancing the NIST Phish Scale

July 3, 2021
https://csrc.nist.gov/pubs/conference/2021/07/03/scaling-the-phish-advancing-the-nist-phish-scale/final

Conference: Human Computer Interaction International 2021 Abstract: Organizations use phishing training exercises to help employees defend against the phishing threats that get through automatic email filters, reducing potential compromise of information security and privacy for both the individual and their organization. These exercises use fake and realistic phish...

Automation of the Cryptographic Module Validation Program (CMVP): Final Project Description Released

July 1, 2021
https://csrc.nist.gov/news/2021/automation-of-the-cmvp-final-project-description

NIST's National Cybersecurity Center of Excellence has released a final Project Description for "Automation of the Cryptographic Module Validation Program (CMVP)."

Introduction to Cybersecurity for Commercial Satellite Operations: Draft NISTIR 8270 Available for Comment

June 30, 2021
https://csrc.nist.gov/news/2021/intro-to-cyber-for-commercial-satellite-operations

NIST has released Draft NISTIR 8270, "Introduction to Cybersecurity for Commercial Satellite Operations." The public comment period is open through August 13, 2021.

Combinatorial Coverage Difference Measurement: Draft White Paper Available

June 22, 2021
https://csrc.nist.gov/news/2021/combinatorial-coverage-difference-measurement-drft

A draft NIST Cybersecurity White Paper, "Combinatorial Coverage Difference Measurement," is now available. The public comment period is open through August 20, 2021.

Hardware-Enabled Security for Containers: NISTIR 8320A Published

June 17, 2021
https://csrc.nist.gov/news/2021/hardware-enabled-security-containers-nistir-8320a

NIST's National Cybersecurity Center of Excellence (NCCoE) has finalized NISTIR 8320A, "Hardware-Enabled Security: Container Platform Security Prototype."

IR 8320A (Final)

Hardware-Enabled Security: Container Platform Security Prototype

June 17, 2021
https://csrc.nist.gov/pubs/ir/8320/a/final

Abstract: In today’s cloud data centers and edge computing, attack surfaces have significantly increased, hacking has become industrialized, and most security control implementations are not coherent or consistent. The foundation of any data center or edge computing security strategy should be securing the pl...

Identity as a Service for Public Safety: Draft NISTIR 8335 Available for Comment

June 16, 2021
https://csrc.nist.gov/news/2021/idaas-for-public-safety-draft-nistir-8335

NIST's NCCoE has released Draft NISTIR 8335, "Identity as a Service for Public Safety." The public comment period ends August 2, 2021.

IR 8335 (Initial Public Draft)

Identity as a Service for Public Safety Organizations

June 16, 2021
https://csrc.nist.gov/pubs/ir/8335/ipd

Abstract: On-demand access to public safety data is critical to ensuring that public safety and first responder (PSFR) personnel can protect life and property during an emergency. The increasing use of cloud technologies can improve data access but also causes authentication challenges. The objective of this...

NIST Releases the Open Security Controls Assessment Language (OSCAL) 1.0.0

June 10, 2021
https://csrc.nist.gov/news/2021/nist-releases-oscal-1-0-0

NIST's OSCAL 1.0.0 provides a stable release for wide-scale implementation.

Internet of Things Cybersecurity Improvement Act

https://csrc.nist.gov/topics/laws-and-regulations/laws/internet-of-things-cybersecurity-improvement-act

Internet of Things Cybersecurity Improvement Act of 2020 (Public Law 116-207; December 4, 2020)

Identity Federation for Public Safety: Draft NISTIR 8336 Available for Comment

June 9, 2021
https://csrc.nist.gov/news/2021/identity-federation-for-public-safety-draft-nistir

NIST's National Cybersecurity Center of Excellence (NCCoE) has released Draft NISTIR 8336, "Background on Identity Federation Technologies for the Public Safety Community." The public comment period ends July 26, 2021.

Ransomware Risk Management: Preliminary Draft NISTIR 8374 Available for Comment

June 9, 2021
https://csrc.nist.gov/news/2021/ransomware-risk-management-prelim-draft-nistir

NIST's National Cybersecurity Center of Excellence (NCCoE) has released Preliminary Draft NISTIR 8374, "Cybersecurity Framework Profile for Ransomware Risk Management." The public comment period is open through July 9, 2021.

IR 8336 (Initial Public Draft)

Background on Identity Federation Technologies for the Public Safety Community

June 9, 2021
https://csrc.nist.gov/pubs/ir/8336/ipd

Abstract: This report provides the public safety and first responder (PSFR) community with a basic primer on identity federation—a form of trust relationship and partnership involving the verification of a claimed identity. Identity federation technologies can help public safety organizations (PSOs) to share...

Getting Ready for Post-Quantum Cryptography

June 8, 2021
https://csrc.nist.gov/presentations/2021/getting-ready-for-post-quantum-cryptography

Type: Presentation

Cybersecurity Enhancement Act

https://csrc.nist.gov/topics/laws-and-regulations/laws/cybersecurity-enhancement-act

Cybersecurity Enhancement Act of 2014 (Public Law 113-274; December 18, 2014)

Recommendations for Federal Vulnerability Disclosure Guidelines: Draft NIST SP 800-216 Available for Comment

June 7, 2021
https://csrc.nist.gov/news/2021/draft-federal-vulnerability-disclosure-guidelines

NIST invites comments on Draft NIST Special Publication (SP) 800-216, "Recommendations for Federal Vulnerability Disclosure Guidelines." The public comment period is open through August 9, 2021.

Migration to Post-Quantum Cryptography: Draft Project Description Available for Comment

June 4, 2021
https://csrc.nist.gov/news/2021/migration-to-pqc-draft-project-description

NIST's NCCoE has released a Draft Project Description, "Migration to Post-Quantum Cryptography." The public comment period is open through July 7, 2021.

Enhancing Software Supply Chain Security: Workshop

June 2, 2021 - June 3, 2021
https://csrc.nist.gov/events/2021/enhancing-software-supply-chain-security-workshop

On June 2-3, NIST will host a virtual workshop to enhance the security of the software supply chain and to fulfill the President’s Executive Order (EO) 14028, Improving the Nation’s Cybersecurity, issued May 12, 2021. Among other things, Section 4 of EO 14028 directs the Secretary of Commerce, through NIST, to consult with federal agencies, the private sector, academia, and other stakeholders in identifying standards, tools, best practices, and other guidelines to enhance software supply chain security. Those standards and guidelines will be used by other agencies to govern the federal...

Using Mobile Device Biometrics for Authenticating First Responders: Draft NISTIR 8334 Available for Comment

June 2, 2021
https://csrc.nist.gov/news/2021/authenticating-first-responders-draft-nistir-8334

Draft NISTIR 8334, "Using Mobile Device Biometrics for Authenticating First Responders," is available for public comment through July 19, 2021.

IR 8334 (Initial Public Draft)

Using Mobile Device Biometrics for Authenticating First Responders

June 2, 2021
https://csrc.nist.gov/pubs/ir/8334/ipd

Abstract: Many public safety organizations (PSOs) are adopting mobile devices, such as smartphones and tablets, to enable field access to sensitive information for first responders. Most recent mobile devices support one or more forms of biometrics for authenticating users. This report examines how first resp...

Hardware-Enabled Security: Draft NISTIR 8320 Available for Comment

May 27, 2021
https://csrc.nist.gov/news/2021/hardware-enabled-security-draft-nistir-8320

NIST's National Cybersecurity Center of Excellence (NCCoE) has released Draft NISTIR 8320, "Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases." The public comment period is open through June 30, 2021.

Search CSRC