Publications
Project Description (Final)
March 9, 2017
https://csrc.nist.gov/pubs/pd/2017/03/09/securing-manufacturing-ics/final
Abstract: Industrial Control Systems (ICS) monitor and control physical processes in many different industries and sectors. Cyber attacks against ICS devices present a real threat to organizations that employ ICS to monitor and control manufacturing processes. The NIST Engineering Laboratory (EL), in conjunct...
Events
February 14, 2017 - February 14, 2017
https://csrc.nist.gov/events/2017/federal-computer-security-managers-forum-februa
Presentations & Speakers at a Glance: New Cybersecurity Codes for IT, Cybersecurity & Cyber Functions, Bill Newhouse, NIST and Jodi Guss, OPM; Using Privacy Risk Management to Improve Privacy in Federal Systems, Ellen Nadeau, NIST NOTE: FORUM MEETINGS ARE OPEN TO ONLY FEDERAL/STATE EMPLOYEES, HIGHER EDUCATION EMPLOYEES, AND THEIR DESIGNATED SUPPORT CONTRACTORS. REGISTRANTS MUST USE A .GOV, .EDU, OR .MIL ADDRESS FOR SIGN-UP. SUPPORT CONTRACTORS MUST INDICATE THE AGENCY OR ORGANIZATION THEY SUPPORT. The Federal Computer Security Program Managers Forum (the "Forum") is an informal...
Publications
IR 8062 (Final)
January 4, 2017
https://csrc.nist.gov/pubs/ir/8062/final
Abstract: This document provides an introduction to the concepts of privacy engineering and risk management for federal systems. These concepts establish the basis for a common vocabulary to facilitate better understanding and communication of privacy risk within federal systems, and the effective implementat...
Publications
SP 800-184 (Final)
December 22, 2016
https://csrc.nist.gov/pubs/sp/800/184/final
Abstract: In light of an increasing number of cybersecurity events, organizations can improve resilience by ensuring that their risk management processes include comprehensive recovery planning. Identifying and prioritizing organization resources helps to guide effective plans and realistic test scenarios. Th...
Publications
SP 800-70 Rev. 3 (Final) (Withdrawn)
December 8, 2016
Withdrawn on February 15, 2018.
https://csrc.nist.gov/pubs/sp/800/70/r3/upd1/final
Abstract: A security configuration checklist is a document that contains instructions or procedures for configuring an information technology (IT) product to an operational environment, for verifying that the product has been configured properly, and/or for identifying unauthorized changes to the product. Usi...
Publications
SP 800-179 (Final) (Withdrawn)
December 5, 2016
Withdrawn on June 24, 2022.
https://csrc.nist.gov/pubs/sp/800/179/final
Abstract: This publication assists IT professionals in securing Apple OS X 10.10 desktop and laptop systems within various environments. It provides detailed information about the security features of OS X 10.10 and security configuration guidelines. The publication recommends and explains tested, secure sett...
Publications
IR 8151 (Final)
November 30, 2016
https://csrc.nist.gov/pubs/ir/8151/final
Abstract: The call for a dramatic reduction in software vulnerability is heard from multiple sources, recently from the February 2016 Federal Cybersecurity Research and Development Strategic Plan. This plan starts by describing well known risks: current systems perform increasingly vital tasks and are widely...
Publications
GCR 16-010 (Final)
November 21, 2016
https://csrc.nist.gov/pubs/gcr/16-010/final
Abstract: Monitoring the “physics” of control systems to detect attacks is a growing area of research. In its basic form a security monitor creates time-series models of sensor readings for an industrial control system and identifies anomalies in these measurements in order to identify potentially false contr...
Publications
SP 800-160 (Final) (Withdrawn)
November 14, 2016
Withdrawn on January 03, 2018.
https://csrc.nist.gov/pubs/sp/800/160/final
Abstract: With the continuing frequency, intensity, and adverse consequences of cyber-attacks, disruptions, hazards, and other threats to federal, state, and local governments, the military, businesses, and the critical infrastructure, the need for trustworthy secure systems has never been more important to t...
Publications
IR 7621 Rev. 1 (Final)
November 3, 2016
https://csrc.nist.gov/pubs/ir/7621/r1/final
Abstract: NIST developed this interagency report as a reference guideline about cybersecurity for small businesses. This document is intended to present the fundamentals of a small business information security program in non-technical language.
